Newspaper  $5.00 


I 


PIP  PI  III*  RMVnilT  snaPs  UP  Sequent  and  its 
Dill  uLUL  uUIUUI  multiprocessing  servers.  Page  11. 


The  newsweekly  of  enterprise  network  computing 


July  1  9,  1  999  Volume  16.  Number  29 


The  network  portal:  www.nwfusion.com 


ONLINE 


0  How  would  you  secure  a  three-site,  3,000-user  network?  Find  out 
how  12  vendors  responded  to  our  RFP.  DocFinder:  3823. 

0  Examine  products  from  33  vendors  in  our  Interactive  Buyer's 
Guide.  DocFinder:  3822. 


#  The  firewall  market  is  exploding,  with  new,  hardware-based 
appliances  joining  old-guard  software  products.  Network  World 
Test  Alliance  member  Joel  Snyder  penetrates  the  hype.  Page  53. 

0  Raptor  Firewall  6.0  is  no  dinosaur.  It  eats  up  the  competition  in 
our  hands-on  test  of  six  firewall  products.  Page  56. 


Next  up  at  Nextlink:  finish 
build-out  roll  new  bundles 


BY  DENISE  PAPPALARDO 

BELLEVUE,  WASH.  —  Next- 
link  Communications  will 
turn  up  service  on  the  Texas 
portion  of  its  nationwide  fiber 
backbone  in  September,  three 


months  ahead  of  schedule.  But 
even  as  it  races  to  piece 
together  its  end-to-end  net¬ 
work  story,  the  company  is 
hard  at  work  concocting  ser¬ 
vice  options  that  will  help  set  it 
See  Nextlink,  page  10 


SS  DSL  explosion 

directory  ties  j-ggjy  (g  fjn 

BY  JOHN  FONTANA  ■  ^ 


Sun  is  getting  ready  to  roll 
Netscape’s  directory  technol¬ 
ogy  into  the  next  edition  of 
Solaris,  a  move  that  could 
strengthen  Sun’s  operating 
system  as  a  platform  for  direc¬ 
tory-enabled  networking  and 
electronic  commerce. 

The  integration  effort, 
revealed  last  week  by  Sun/ 
Netscape  Alliance  Chief  Tech¬ 
nology  Officer  Hal  Jesperson,is 
the  first  big  news  out  of  the 
alliance  since  it  was  formed  in 
March  in  the  wake  of  Net¬ 
scape’s  acquisition  by  America 
Online.  Jesperson  spoke  last 
week  at  the  Catalyst  Con¬ 
ference,  a  directory  and  securi¬ 
ty  event  held  in  Lake  Tahoe, 
Calif. 

Sun  plans  to  take  most  of 
the  Netscape  Directory  Server 

See  Sun/Netscape,  page  76 


BellSouth  to  launch  five  new  service  classes. 


BY  DAVID  ROHDE 

ATLANTA  —  Incumbent 
telephone  companies  are  get¬ 
ting  ready  to  climb  higher  up 
the  bandwidth  ladder  with 
their  asymmetrical  digital  sub¬ 
scriber  line  (ADSL)  offerings. 

And  their  new  rivals  —  the 
data-oriented  competitive  local 
exchange  carriers,  or  data 
CLECs  —  are  preparing  to 


match  them  step-for-step  by 
offering  symmetrical  DSL 
(SDSL)  at  higher-than-T- 1 
speeds. 

In  what’s  likely  to  make 
the  biggest  splash,  Network 
World  has  confirmed  that 
BellSouth  will  announce  five 
new  flavors  of  DSL  as  early 
as  this  week.  The  services 
will  include  three  industrial- 
See  DSL,  page  14 


More 


Online 


•  See  how  some  RBOCs  are  beginning  to  offer  DSL 
as  an  alternative  to  T-ls. 

•  Take  a  look  at  US  West's  recent  DSL  price  cuts. 


Bad  rap  for  Back  Orifice  2000?  ^ 


BY  ELLEN  MESSMER 

LAS  VEGAS  —  The  hacker 
group  Cult  of  the  Dead  Cow 
last  week  posted  Back  Orifice 
2000,  a  free  “tool”  for  seizing 
control  of  an  NT-based  net¬ 
work.  But  is  this  software  evil 
—  or  is  it  good? 

Unlike  last  year,  when  CDC 
unleashed  its  first  version  of 
Back  Orifice  and  called  it  the 
hacker’s  best  friend,  this  time 
the  group  wants  you  to 
believe  Back  Orifice  is 
for  legitimate  use  by  net¬ 
work  managers  for  remote 


administration. 

CDC’s  bold  assertion  —  and 
the  fact  that  some  CDC  mem¬ 
bers  admit  to  having  “day  jobs” 
at  security  vendors  —  high¬ 
lights  the  Jekyll-and-Hyde  na¬ 
ture  of  the  security  industry, 
which  knows  some  of  the  best 
talent  out  there  loves  the  dark¬ 
ness  more  than  the  light. 

Over  the  raucous,  drunken 
weekend  of  all-night  parties 
and  network  hi-jinks  that  was 
the  Def  Con  hacker  conven¬ 
tion,  CDC  got  its  moment  in 
the  limelight.  With  videos  and 

See  Back  Orifice  2000,  page  9 
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IBM  e-commerce  software  powers  the  REI  online  store 
—  and  sales  that  exceed  projections  by  over  360%. 

Can  IBM  e-commerce  software  help  you? 


IBM  software  is  helping  thousands  of  companies  build,  run  and  manage  powerful 
interactive  e-commerce  Web  sites.  For  REI,  that  means  everything  from  state-of-the- 
wilderness  gear  you  can  buy  to  clinics  on  outdoor  skills,  enthusiast  bulletin  boards 
and  a  world  of  trips  and  tours.  The  scope  of  REIs  offerings  led  them  to  IBM. 

IBM  software  provides  the  building  blocks  for  all  facets  of  e-business,  including 
secure  payments,  electronic  catalogs,  and  order  processing.  For  REI,  proven 
products,  such  as  Net.Commerce,  DB2®  Universal  Database™  and  IBM  Firewall  deliver 
the  scalability,  reliability  and  security  it  takes  to  reach,  sell  and  service  a  growing 
community  of  outdoor  enthusiasts. 

The  results  have  been  nothing  less  than  astonishing.  In  the  first  quarter  alone,  REIs 
sites  generated  online  sales  that  exceeded  projections  by  over  360%.  And  these 
e-sales  are  4  times  the  size  of  those  in  their  brick-and-mortar  counterparts.  Bottom 
line,  REI  is  growing  profits  far  beyond  its  wildest  expectations. 


r  ■ 

Net.Commerce 

Enables  you  to  market  and  sell 
in  a  secure  and  scalable  way 
on  the  Internet.  Award  winning 
software  provides  integrated 
e-commerce  capabilities,  from 
site  creation  to  online  payments 


MQSeries® 

Helps  you  integrate  new  and 
existing  applications  into  your 
e-commerce  solution.  Fully 
Java™enabled,  MQSeries  is 
the  world’s  leading  business 
integration  product  and  works 
across  more  than  35  platforms. 


REI  is  just  one  example  of  the  thousands  of  e-commerce  businesses  IBM  software  has 
helped  build  and  grow.  From  Web  storefronts  to  integrating  your  business  systems  and 
supply  chains,  IBM  offers  a  breadth  of  software  products  simply  unmatched  by  anyone. 
All  backed  by  the  know-how  and  support  of  IBM  and  its  Business  Partners. 


Profit  from  the  learning  of  over  10,000  e-businesses  with 
IBM  online  resources  and  our  free  e-commerce  Roadmap. 
Visit  www.  ibm.  com! software  led roadmap 


DB2  Universal  Database 

Has  the  speed,  scale  and 
reliability  to  meet  any  demand, 
with  seamless  integration  from 
virtual  storefront  to  back-end 
core  business  systems. 


WebSphere™ 

WebSphere  Application  Server 
extends  core  business  functions 
to  Web  clients  and  vice  versa. 
Built-in  connectors  to  databases 
and  other  systems  help  meet 
high  transaction  demands  on 
existing  and  future  applications. 


IBM  software  can  help  you  build, 
run  and  manage  e-commerce 
solutions  on  all  major  platforms. 


IBM,  DB2  and  MQSeries  are  registered  trademarks  and  Universal  Database,  WebSphere  and  the  e-business  logo  are  trademarks  ol  International  Business  Machines  Corporation.  Java  and  all 
Java-based  trademarks  and  logos  are  trademarks  of  Sun  Microsystems,  Inc.  in  the  United  States,  other  countries,  or  both.  Other  company,  product  and  service  names  may  be  the  trademarks 
or  service  marks  of  others.  ©1999  IBM  Corp.  All  rights  reserved. 


If  your  Internet  telephony 
supplier  doesn’t  have  serious 
telephony  experience,  you  may  not 
be  happy  with  the  results. 


Nortel  Networks™  introduces  Inca™  next-generation  Internet  telephony.  We’re 
changing  the  way  businesses  communicate  by  bringing  the  world  of  data  and  voice 
together  as  only  we  can.  This  next  era  of  networking  is  built  on  Inca,  anew  product 
portfolio  based  on  our  Internet  Communications  Architecture,  which  utilizes 
open  standards.  Whether  you’re  evolving  your  current  network  or  building  one 
from  scratch,  our  Inca  solutions  will  work  for  your  business.  So  come  together  with 
the  one  company  with  the  experience  and  expertise  to  deliver  next-generation 
Internet  telephony  today.  Nortel  Networks.  www.nortelnetworks.com/16JA  How  the  world  shares  ideas. 


N0RTEL 

NETWORKS 


Nortel  Networks,  the  Nortel  Networks  logo,  the  Globemark.  Inca  and  'How  the  world  shares  ideas "  are  trademarks  of  Nortel  Networks.  ©  1999  Nortel  Networks.  All  rights  reserved. 

Free  Product  info  enter  NWInfoXpress  #50  online  @  www.networkworld.com/infoxpress 
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THIS  WEEK 
ONLINE 

What  are  your  top  10?  What  are 
the  key  network  technologies  you 
use  today  —  and  what  will  they 
be  next  year?  Our  Buzz  Issue  in 
September  will  take  a  look  at  this 
(and  other  issues),  and  we  want  to 
know  your  thoughts.  We've  put  up 
a  quick  'n'  easy  survey  form  — 
rate  10  technologies  on  how 
important  they  are  and,  if  you 
want,  expand  on  your  answers. 
DocFinder:  3841 

Convergence.  Is  it  a  buzzword  or  a 
reality  in  the  enterprise?  Discuss 
your  converged  voice/data  nets 
—  or  why  you  don't  think  con¬ 
verged  networks  will  work  —  in 
our  new  online  forum.  If  you're 
considering  such  nets,  what  fea¬ 
tures  would  you  want?  DocFinder: 
3846 

Pending  at  the  help  desk.  One 

Fusion  reader  wants  to  force  his 
users  to  log  on  to  a  Novell  server 
as  part  of  their  Windows  95  logon 
process.  The  problem  is  too  many 
hit  their  escape  keys  or  otherwise 
mess  up  the  basic  log-on  process. 
How  can  he  get  the  Novell  Client 
32  to  do  what  he  wants? 
DocFinder:  3847 

Also  pending.  Another  Fusion  user 
is  having  trouble  setting  up 
Switched  Multimegabit  Data 
Service,  specifically,  mapping  one 
IP  address  to  a  remote  SMDS 
node  via  an  ISP  that  only  supports 
unicast  SMDS.  Can  he  do  this  with 
his  NetBuilder  II?  DocFinder:  3848 

Directories.  They're  not  just  for 
e-mail  anymore.  Need  to  get  up  to 
speed  on  what  today's  directories 
can  (and  can’t)  do?  Our  Direc¬ 
tories  Net  Resources  page  will 
link  you  to  directory  primers, 
overviews  of  key  issues  facing 
directories  (such  as  integrating 
proprietary  systems  from  different 
vendors)  and  other  stories  of 
interest  from  Network  World  and 
around  the  'Net.  DocFinder:  3849 


How  to  get  onto 
Network  World  Fusion 

Click  on  Register  on  the  home  page 
and  follow  the  instructions. 
Subscribers,  keep  your  NWF  number 
—  highlighted  on  the  front  cover's 
mailing  label  —  handy  during 
registration.  Nonsubscribers 

must  fill  out  an  online  - 

registration  form.  _ 


Find  out  how  Sun  helped  Jennifer 
Zahm-Maguire  plan  her  wedding. 
Page  63. 
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NEWS  BRIEFS.  JULY  19,  1999 


Amazon.com  branches  out 

Internet  retailer  Amazon.com  last  week 
expanded  its  operations  yet  again  by 

opening  two  new 
online  stores:  one 
for  electronics  and 
the  other  for  toys 
and  games.  The 
irrepressible  Jeff 
Bezos,  Amazon.com 
founder  and  CEO, 
says  he’s  sure  cus¬ 
tomers  want  to  buy 
those  types  of 
items  online,  just 
as  they  have 
bought  Amazon, 
corn’s  books  and  videos  in  the  past. 
However,  the  new  toy  department’s  bid  to 
attract  adult  shoppers  almost  resulted  in  a 
public  relations  faux  pas,  Bezos  acknowl¬ 
edges  in  an  e-mail  sent  to  customers. 

“A  true  story  about  this  grown-ups  sec¬ 
tion:  When  we  had  our  first  design  meeting, 
we  referred  to  it  as  ‘Adult  Toys,”’  Bezos  says. 
“After  30  seconds  and  quite  a  bit  of  laughter, 
we  realized  it  would  certainly  need  a  differ¬ 
ent  name.” 

Open  Market  looks  to  FutureTense 

Open  Market  last  week  announced  it 
intends  to  open  its  arms  to  FutureTense,  a 
provider  of  Internet  content  management 
software,  through  a  stock-swap  agreement 
valued  at  about  $125  million.  Open  Market 
President  and  CEO  Gary  Eichhorn  says  the 
FutureTense  Internet  Publishing  System 
software  complements  Open  Market’s  elec¬ 
tronic  catalog  and  transaction  product  line. 
There  are  plans  to  integrate  the  two  lines 
sometime  in  the  fall  after  the  merger  is  com¬ 
pleted.  Founded  in  1995,  FutureTense  is 
located  in  Acton,  Mass. 

Intel  steps  up  Internet  focus 

Intel  last  week  spun  off  a  new  division  that 
will  focus  on  business  opportunities  on  the 
Internet.  The  company  formed  the  Commu¬ 
nications  Product  Group,  which  will  com¬ 
bine  Intel’s  network  hardware,  systems  man¬ 
agement  software  and  support  activities  into 
one  area.  The  division  will  also  embrace 
Dialogic,  the  computer  telephony  equipment 
maker  Intel  recently  acquired.The  group  will 
be  headed  by  John  Miner,  formerly  general 
manager  of  the  Enterprise  Server  Group.The 
Communications  Product  Group  will  report 
to  CEO  and  President  Craig  Barrett. 

Intel’s  Network  Communications  Group 
will  retain  responsibility  for  network  compo¬ 
nent  activities,  such  as  the  acquisitions  of 
Level  One  and  Softcom  Microsystems.  It  will 
also  manage  Intel’s  foray  into  network 
processors,  and  the  company’s  home  net¬ 
working  and  network  adapter  products.  Mark 
Christensen  will  lead  this  group. 


Score  one  for  encryption  export 

Having  just  decrypted  the  press  release, 
we  can  tell  you  that  VPNet  Technologies  of 
San  Jose  has  received  its  third  Encryption 
Licensing  Arrangement  from  the  Department 
of  Commerce's  Bureau  of  Export  Admin¬ 
istration.  This  lets  VPNet  ship  products  sup¬ 
porting  168-bit  Triple-Data  Encryption  Stan¬ 
dard  encryption  to  businesses  abroad  with¬ 
out  getting  further  approvals.  “U.S.  compa¬ 
nies  can  and  should  be  able  to  compete  in 
this  rapidly  growing  market,”  says  William 
Reinsch,  undersecretary  of  Commerce  for 
Export  Administration. 

Bills  coming  due  for  Iridium 

The  walls  are  closing  in  on  Iridium,  the 
money-losing  satellite-phone  provider.  Last 
week  its  original  equity  investor,  Motorola, 
said  it  may  force  Iridium  into  bankruptcy  re¬ 
organization  or  liquidation  if  the  service 
provider  can’t  restructure  its  finances  out  of 
court.  The  next  day  Iridium  said  it  will  miss  a 
$90  million  interest  payment  on  its  bonds. 
That’s  a  bad  omen  in  advance  of  an  Aug.  1 1 
deadline  —  already  twice  delayed  —  to  meet 
a  large  bank  loan. 

But  the  satellite  industry  as  a  whole  is 
claiming  Iridium’s  woes  are  the  company’s 


A  bad  sign 


Iridium's  quarterly  losses  in  millions: 

Q1'98  Q2'98  Q3'98  Q4'98  Q1'99 
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own  making,  rather  than  any  sign  that  users 
won’t  go  for  high-speed  voice  and  data  com¬ 
munications  over  large  networks  of  low-earth 
orbit  (LEO)  satellites.  For  example,  Motorola 
recently  agreed  to  design  and  construct  satel¬ 
lites  for  Teledesic,  a  planned  system  of  hun¬ 
dreds  of  LEO  satellites  providing  high-speed 
Internet  access.  Analysts  say  Iridium  until 
recently  failed  to  concentrate  on  the  right  ver¬ 
tical  industries,  priced  its  services  too  high 
and  advertised  heavily  before  handsets  were 
ready  and  distributors  were  trained. 

HP's  in  the  alphabet  soup 

A  U.S.  District  Court  Judge  in  Boston  last 
week  issued  a  preliminary  injunction  pro¬ 
hibiting  Hewlett-Packard  from  using  the  ini¬ 
tials  E  and  MC  in  the  names  of  its  storage 
products,  pending  die  outcome  of  a  suit  filed 
by  storage  vendor  EMC.  HP’s  use  of  the  initials 
has  been  a  matter  of  contention  between  the 
companies  since  May.  HP  argued  in  court  that 
ridding  its  products  of  the  letters  would  cost 
the  company  more  than  $  100  million  in  sales. 


Amazon.com's  Bezos 
expands  operations  to 
electronics  and  toys. 


Concord  tool  reports 
net  errors,  snags 


BY  JEFF  CARUSO 

MARLBOROUGH,  MASS.  - 
Trying  to  zero  in  on  problem 
spots  in  networks  and  systems 
isn’t  always  easy,  but  Concord 
Communications  this  week  will 
try  to  give  network  managers  a 
hand  when  it  unveils  a  new 
reporting  capability. 

The  Top  N  Reports  function 
for  Concord’s  Network  Health 
monitoring  software  shows 
which  servers,  routers  or  other 
networked  elements  have  the 
highest  utilization  rates  or  the 
most  errors.  Previously,  Net¬ 
work  Health  reported  only  on 
trends  for  individual  pieces  of 
equipment. 


as  disk  activity  on  servers,  CPU 
utilization  on  routers,  or  dis¬ 
carded  frames  per  second  on 
WAN  ports. 

The  customization  is  key, 
says  Kathrin  Winkler,  principal 
consultant  at  Renaissance 
Worldwide.  The  network  man¬ 
ager  responsible  for  watching 
disk  space  could  be  different 
from  the  one  whose  job  it  is  to 
track  overall  server  availability. 
“Each  operator  has  his  own  per¬ 
spective,”  she  says. 

Concord  also  responded  to  a 
report  issued  last  month  by  The 
Tolly  Group  and  commissioned 
by  rival  Tawe  Software.  The 
report  said  that  Network  Health 
was  unable  to  detect  a  brief 


Zooming  in 


Concord's  Top  N  Reports  function  lets  users  look  at  certain 
variables  for  specific  groups  of  equipment. 
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Users  can  specify  certain  groups,  such 
as  an  engineering  department's  servers. 
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In  the  past,  exception 
reports  were  the  only  way  to 
find  problem  areas  through 
Network  Health,  says  Reinhard 
Pfaffinger,  principal  operations 
engineer  at  USWeb.  “Now  I’ve 
got  a  snapshot  of  who’s  using 
the  most  bandwidth  and  gener¬ 
ating  the  most  errors,”  he  says. 

USWeb  is  beta-testing  Top  N 
and  uses  it  internally  to  isolate 
which  of  the  firm’s  frame  relay 
links  are  most  heavily  used. 
USWeb  plans  to  provide  this  in¬ 
formation  to  its  customers 
through  daily  e-mail  reports  or 
updates  to  a  Web  site. 

Top  N  lets  network  man¬ 
agers  measure  a  host  of  vari¬ 
ables,  including  indicators  such 


server  outage  or  determine  the 
root  cause  of  a  network  failure, 
while  Tawe ’s  product  did  both. 

Concord’s  software  isn’t 
intended  to  issue  alarms  when 
servers  go  down,  points  out 
Kevin  Conklin,  vice  president 
of  marketing  at  Concord. 
Network  Health  should  be  used 
to  measure  sewer  uptime  over 
a  longer  period,  while  tools 
from  Hewlett-Packard,  Micro¬ 
muse  or  Systems  Management 
Arts  should  be  used  to  pinpoint 
specific  problems,  he  says. 

Top  N  Reports  will  be  part  of 
Network  Health  4.5,  scheduled 
to  ship  next  month.  Network 
Health  runs  on  Solaris,  HP-UX 
and  Windows  NT.  □ 
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Sure,  we  get  around.  But  we  never  leave  our 
clients' problems  far  behind. 

Swiss  Post  was  the  world's  first  postal  service  to  appreciate  how  electronic  business  could  dramatically 
increase  its  core  business.  And  the  first  thing  they  did  about  it  was  to  call  in  Unisys.  We  created  an  IT 
platform  that  let  Swiss  Post's  business  customers  open  their  own  comprehensive,  Web-based  retail 
outlets.  With  each  site  integrating  into  Swiss  Post's  warehousing,  finance  and  distribution  operations. 

Not  surprisingly,  given  our  work  ethic,  the  solution  not  only  set  new  standards  but  was  delivered 
ahead  of  schedule.  Way  ahead  of  schedule,  www.unisys.com 


U\iSYS 


We  eat,  sleep  and  drink  this  stuff. 


Cl 999  Unisys  Corporation 


News 

IBM  upgrading  Web-to-host  products 


BY  MARC  SONGINI 

LAS  VEGAS  —  IBM  is 
rolling  out  new  products  and 
upgrades  designed  to  make 
life  simpler  for  IT  staffers 
connecting  Web-based  users 
to  legacy  applications. 

The  company’s  SecureWay 
software  division  is  expected 
to  announce  this  week  at  the 
Solutions  ’99  developers  con¬ 
ference  a  new  product  called 
Screen  Customizer,  which 
can  present  legacy  data  from 
multiple  hosts  in  one  cus¬ 
tomizable  view. 

IBM  will  also  announce 
Host  On-Demand  4.0,  as  well 
as  Host  Publisher  2.0.  Host 
On-Demand  is  IBM’s  Web-to- 
host  Java  terminal-emulation 
product.  Host  Publisher  sits 


on  a  Web  server  and  converts 
host  data  into  an  HTML  for¬ 
mat  for  presentation  to  the 
desktop. 

IBM  executives  say  Screen 
Customizer  is  the  company’s 
first  homemade  Web-to-host 
rejuvenator,  a  software  tool 
that  takes  legacy  data  from  a 
3270  session,  for  example, 
and  automatically  puts  on  top 
of  it  an  easy-to-use  graphical 
user  interface  with  automatic 
menu  buttons  and  defined 
input  fields. 

Customizer  sits  on  the 
Web  server,  and  when  a 
user  logs  on,  it  launches  a 
Java  applet  that  does  the 
screen  conversion  for  the 
desktop. 

As  the  product  requires  no 
special  coding,  it  simplifies 


matters  for  users  and  IS  staff, 
IBM  says.  The  product  inte¬ 
grates  with  Host  On-Demand 
4.0  and  IBM’s  Personal 
Communications  4.3  Web-to- 
host  product. 

Users  can  access  multiple 
hosts  and  integrate  their 
data  on  a  single  screen. 
Using  Customizer,  IT  staff 
can  change  fonts  and  colors 
on  the  screen,  as  well  as  pre¬ 
set  the  software  to  automati¬ 
cally  navigate  users  to  appro¬ 
priate  Web  pages,  thus  saving 
them  time. 

IBM  also  has  spun  its  Host 
Publisher  product  off  from 
Communications  Server  for 
NT,  which  allows  Windows 
PC  users  in  an  IP  net  to 
access  SNA  data.  Host 
Publisher  can  now  run  on  a 


variety  of  Web  hosting  plat¬ 
forms,  including  OS/390,  AIX 
and  Sun  Solaris  Web  servers. 

With  Host  On-Demand  4.0, 
users  will  be  able  to  log  on  to 
AS/400  servers  and  establish 
tn5250  sessions,  instead  of 


IBM's  Web-to-host  bash 

Big  Blue  will  soon  roll  out 
the  following: 

Host  On-Demand  4.0: 

•  AS/400  connectivity. 

•  SSL  client  authentication  and 
PK!  support. 

•  ActiveX  support. 

Screen  Customizer  1.0: 

•  Rejuvenates  host  application. 

•  Combines  3270  and  5250  in  one 
screen. 

Host  Publisher  2.0: 

•  Delivers  host  information  in 
HTML  format. 

•  Supports  AIX,  OS/390  and  NT. 


just  receiving  tn3270  data- 
streams.  To  ease  administra¬ 
tion,  IBM  now  offers  Light¬ 
weight  Directory  Access 
Protocol  support  to  keep 
track  of  user  privileges. 

The  added  simplicity  of 
the  latest  version  of  Host 
Publisher  has  one  user  look¬ 
ing  to  implement  the  product 
in  his  network  immediately. “I 
haven’t  seen  anything  out 
there  with  this  ease  of  use,” 
says  Doug  Piner,  Web  site 
manager  at  the  North 
Carolina  State  Treasury.  Piner 
has  been  using  the  first  ver¬ 
sion  of  the  product  in  his  net¬ 
work,  which  has  50  state 
agencies  accessing  data. 

Host  On-Demand  4.0  is 
available  now  for  $199. 

Screen  Customizer  is  avail¬ 
able  in  beta.  Host  Publisher 
2.0  goes  into  beta  this 
month.  Pricing  for  the  two 
products  has  not  been  deter¬ 
mined  yet.  B 


Internet's  ICANN  can't  pay  its  bills,  seeks  relief 


Nonprofit  domain  name  overseer  scrambles  for  sustaining  funds. 


BY  CAROLYN 
DUFFY  MARSAN 

Seven  months  after  its 
launch,  the  nonprofit  organi¬ 
zation  that  oversees  Internet 
domain  name  registration  is 
out  of  cash  and  has  racked  up 
$  1  million  in  unpaid  bills. 


Although  the  organization’s 
leaders  are  begging  for  contri¬ 
butions  from  network  compa¬ 
nies  and  government  agen¬ 
cies,  no  white  knight  has 
stepped  forward  to  rescue  the 
controversial  venture. 

The  Internet  Corporation 
for  Assigned  Names  and 
Numbers  (ICANN)  has  hit 
financial  straits  at  a  critical 
juncture  in  the  transition  of 
the  domain  name  registry 
business  from  a  monopoly  to 


a  competitive  market.A  test  of 
how  well  five  companies  can 
share  registration  of  .com, 
.net  and  .org  domain  names 
was  scheduled  for  completion 
on  July  16.  ICANN  has 
approved  37  additional  com¬ 
panies  to  offer  registration 
services  once  the  test  is  done. 


Of  concern  for  corporate 
Internet  users  is  whether 
ICANN ’s  financial  problems 
will  affect  their  ability  to  get 
domain  names  approved 
quickly,  accurately  and  at  a 
reasonable  price. 

“If  the  funding  problem 
lingers  long  enough,  then 
sooner  or  later  there  won’t  be 
people  willing  to  donate  their 
time  to  ICANN,”  says  Chief 
Counsel  Joe  Sims.  The 
Internet  community'  needs  to 


decide  whether  a  competitive 
domain  name  process  is 
“important  enough  to  contin¬ 
ue  to  do.” 

“  ICANN ’s  financial  situation 
is  serious  in  that  we  might 
have  looked  to  ICANN  as  a 
unifying  force  in  the  industry,” 
says  Chuck  Davin,  chief  tech¬ 
nical  officer  at  PSINet,  a 
Virginia-based  ISP  that  is  plan¬ 
ning  to  offer  domain  name 
registration  services.  But  with 
or  without  ICANN,  “we 
believe  the  environment  is 
going  to  be  competitive  and 
open  and  have  no  government 
involvement,”  he  says. 

Until  recently,  Network 
Solutions,  Inc.  (NSI)  of 
Herndon,  Va.,  assigned  most 
Internet  domain  names,  under 
a  contract  with  the  U.S.  gov¬ 
ernment.  NSI  maintains  a  cen¬ 
tral  database  of  domain 
names,  assigns  new  names 
and  collects  fees  for  the  use 
of  those  names.  With  respon¬ 
sibility  for  the  three  most 
popular  domain  names  — 
.com,  .net  and  .org  —  NSI 
controls  nearly  75%  of  all 
Internet  name  registrations. 

The  Clinton  administration 
targeted  NSI’s  monopoly'  posi¬ 
tion  in  1997,  when  it  an¬ 


nounced  plans  to  privatize  the 
management  of  Internet  do¬ 
main  name  allocation.  Last 
November,  the  Department  of 
Commerce  selected  ICANN  to 
oversee  the  privatization  plan. 

To  get  started,  ICANN  raised 
more  than  $400,000  from  net¬ 
work  companies,  including 
Ascend,  MCI  WorldCom, 
America  Online  and  Cisco. 
These  funds  were  intended  to 
maintain  ICANN’s  activities 
until  a  regular  source  of 
income,  such  as  registration 
fees,  could  be  established. 

ICANN  is  seeking  funds 
from  its  original  donors,  the 
Department  of  Commerce, 
trade  groups  and  government 
agencies  outside  the  U.S. 

ICANN  planned  to  raise 
money  by  initiating  a  $5,000 
annual  fee  for  registrars  and  a 
$  1  annual  fee  for  domain 
name  registrations.  However, 
NSI  has  refused  to  pay  the  fee. 
And  because  registration  by 
other  companies  is  just  begin¬ 
ning,  ICANN  has  yet  to 
receive  any  revenue  from 
fees.  These  fees  were  project¬ 
ed  to  contribute  $5  million  to 
ICANN’s  coffers  in  the  fiscal 
year  starting  July  1. 

MCI  WorldCom’s  original 


"I/I fe  simply  couldn't 
operate  the  Internet 
without  an  organiza¬ 
tion  lilce  ICAIMIM." 


Vint  Cerf,  senior  vice  president  of  Internet 
engineering,  MCI  WorldCom 


donation  of  $50,000  was  one 
of  ICANN’s  largest,  and  the 
firm  is  one  of  a  few  willing  to 
pony  up  additional  funds. 

“We  are  looking  at  a  num¬ 
ber  of  different  ways  of  help¬ 
ing  ICANN,  including  direct 
gifts  and  loan  guarantees  to 
help  bridge  the  funding  gap 
until  ICANN  can  establish  a 
permanent  funding  model,” 
said  Vint  Cerf,  senior  vice 
president  of  Internet  engi¬ 
neering  at  MCI  WorldCom. 

At  a  briefing  for  Capitol 
Hill  staff,  Cerf  said  the 
Internet  needs  a  mechanism 
for  global  consensus  building 
and  a  means  to  resolve  trade¬ 
mark  and  domain  name  con¬ 
flicts.  “We  simply  couldn’t 
operate  the  Internet  without 
an  organization  like  ICANN,” 
he  said.  B 
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it  Know  i 


This  week's  question: 

What’s  the  focus  of  the 
Beowulf  Project? 


www.nwfusion, 
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Back  Orifice  2000, 

continued  from  page  1 

a  soundtrack  bombarding  the  packed 
hall  at  the  Alexis  Park  Hotel,  19  CDC 
members  cavorted  on  stage  and 
announced  their  latest  achievement. 
Back  Orifice  2000. 

CDC  urged  the  black-clad,  tattooed 
Def  Con  audience  —  overwhelmingly 
twentysomething  males  —  to  “take 
control”  with  the  client/server  free¬ 
ware  they  created. 

According  to  Dildog,  the  software’s 
main  author,  the  freeware  lets  a  remote 
user  with  the  Back  Orifice  2000  client 
secretly  control  any  Windows  desktop 
or  server  on  which  the  Back  Orifice 
2000  server  component  has  been 
installed. 

CDC  members  make  it  clear  they  are 
motivated  by  a  hatred  for  Microsoft’s 
marketing  power  and  take  pride  in 
knifing  the  underbelly  of  Microsoft 
products. 

Unauthorized  Windows  users  of  all 
stripes  are  certain  to  exploit  Back 
Orifice  as  a  Trojan  horse  that  can  hide 
on  the  network.  Creatively  malicious 
individuals  will  extend  the  software’s 
reach  with  third-party  tools,  since  Back 
Orifice  2000  is  built  on  open  APIs. 

But  at  Def  Con,  Dildog  made  the 
remarkable  assertion  that  Back  Orifice 
2000  is  for  legitimate  use,  too,  as  “a 
remote  administration  tool  for  corpo¬ 
rate  America. 

“It’s  just  like  other  tools  that  cost  a 
whole  lot  more,  such  as  Symantec’s 
pcAnywhere  or  Microsoft’s  System 
Management  Server,”  he  claimed.  CDC 
even  held  a  press  conference  at  Def 


Hacker  user 


virus  researcher.  “Most 
Trojans  are  delivered  as 
attachments  in  e-mail, 
and  with  our  Norton 
Anti-Virus  product,  you 
now  have  an  option  to 
destroy  or  quarantine 
them  in  order  to  send 
them  to  our  researcher.” 

Network  Associates, 

IBM,  Axent  Technol¬ 
ogies,  Computer  Assoc¬ 
iates  and  Internet 
Security  Systems  (ISS) 
are  also  of  the  mind  that 
Back  Orifice  2000, 
because  of  its  stealth 
and  origin,  has  to  be  treated  as  a  threat. 

“We  wouldn’t  classify  it  as  an  admin¬ 
istration  tool  —  we’d  classify  it  as  a 
back  door,”  says  Chris  Rouland,  director 
of  the  ISS  X-Force,  the  team  that  leaps 
into  action  to  combat  new  security  vul¬ 
nerabilities.  “It  was  developed  to  mali¬ 
ciously  and  stealthily  install  itself  on  a 
server.  It  even  has  what  they  call  ‘insid¬ 
ious  mode’  so  you  can’t  detect  the  traf¬ 
fic.  It  makes  it  look  like  a  ping  packet 
to  subvert  scanners.  It’s  designed  to  fly 
in  under  the  radar.” 

Other  than  garden-variety  hackers, 
the  group  most  likely  to  use  Back 
Orifice  2000,  or  a  variation  of  it  (there 
will  be  many,  since  CDC  intends  to 
release  the  source  code),  is  the  govern¬ 
ment  intelligence  community.  Users 
might  include  the  National  Security 
Agency,  and  the  FBI  and  its  foreign 
counterparts,  which  all  conduct  net¬ 
work  surveillance.  “I  don’t  care,”  shrugs 
one  CDC  member,  Tweetyfish.  “It’s  for 
everyone.” 


Secret  takeover  of  NT-based  networks 

How  Back  Orifice  2000  can  take  over  your  workstation 

o  A  Back  Orifice  2000  user  accesses  a  corporate  server 
over  the  Internet.  The  program  can  disguise  itself  as 
innocuous  network  traffic  to  avoid  intrusion-detection 
software  and  pass  through  firewalls. 


O  Users  can  fully  take  over  clients  on 
the  network,  similar  to  programs 
such  as  pcAnywhere  and  Wanderlink. 


OThe  program,  which 
now  supports  TCP/IP, 
can  situate  itself  on 
servers  in  a  variety  of 
network  environments. 


Internet 


Firewall  Corporate  server 


Corporate  client 


you  have  to  be  both  interested  and  cau¬ 
tious,”  he  says.  “If  you  want  to  learn 
about  this  technology,  you’ll  want  to 
hear  both  sides.  But  there’s  a  tremen¬ 
dous  ethical  dilemma  here.” 

Asked  whether  they  would  use  Cult 
of  the  Dead  Cow’s  tool,  some  network 
managers  merely  burst  into  laughter. 
Others  grew  thoughtful. 

Bruce  McCloud,  systems  engineer  at 
the  California  Highway  Patrol,  says  he 
is  open  to  the  idea  of  security  free¬ 
ware,  such  as  the  Satan  network-scan¬ 


ner,  released  a  number  of  years  ago.  But 
since  Cult  of  the  Dead  Cow  hasn’t 
renounced  computer  hacking,  he  can’t 
consider  using  Back  Orifice  2000. 

“They  may  be  very  talented,  but  as 
long  as  they’re  still  advocating  hacking, 
I  would  have  to  say  no,”  McCloud  says. 

One  network  antidote  for  Back 
Orifice  2000  may  be  coming  from  Cult 
of  the  Dead  Cow  itself.  One  member, 
Sir  Dystic,  claims  he  will  soon  release 
software  for  detecting  and  eradicating 
the  group’s  latest  creation.  3 
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The  Def  Con  conference,  where  Back  Orifice  2000  debuted,  attracted  all  kinds  of  people. 


Con  to  try  to  convince  the  media  that 
Back  Orifice  2000  is  kosher. 

Is  it?  The  security  industry  has  over¬ 
whelmingly  declared  Back  Orifice 
2000  to  be  public  enemy  No.  1.  CDC 
defenders,  though,  point  out  that  if 
CDC  were  truly  evil,  it  would  be  more 
clandestine  in  its  labors. 

Nonetheless,  just  about  every  anti¬ 
virus  software  developer  has  declared 
Back  Orifice  2000  to  be  a  Trojan  horse, 
and  has  upgraded  its  products  to  search 
for  and  destroy  the  freeware.  The  same 
efforts  are  underway  by  those  making 
intrusion-detection  products. 

“It’s  just  another  Trojan  horse  for  us,” 
says  Darren  Kessner,  Symantec’s  senior 


Tweetyfish  acknowledges  that  sever¬ 
al  CDC  members  have  day  jobs  work¬ 
ing  for  security  firms,  though  he 
wouldn’t  say  which  companies.  Many 
security  vendors,  particularly  IBM,  have 
a  clearly  defined  policy  against  hiring 
known  computer  hackers.  Neverthe¬ 
less,  the  security  industry  strives  to 
maintain  some  sort  of  contact  with  the 
hacker  community  to  keep  abreast  of 
the  latest  exploits. 

Though  Axent  categorizes  Back 
Orifice  2000  as  a  threat,  the  company’s 
manager  of  information  services,  Drew 
Williams,  admits  that  the  software  is 
“interesting.” 

“Like  any  freeware  code  out  there, 
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Nextlink, 

continued  from  page  1 

apart  in  the  crowded  telecom 
field. 

One  likely  approach: 
bundling  services  and  giving 
away  one  or  more  elements  — 
such  as  Internet  access. 
Another:  getting  into  the  Web- 
and  application-hosting  game. 

Of  course  the  fundamental 
differentiator  for  Nextlink  will 
be  end-to-end  control  of  a  high- 
capacity  net,  says  CEO  Steven 
Hooper.  The  company  is  a  com¬ 
petitive  local  exchange  carrier 
that  is  breaking  out  of  the  CLEC 
mold  by  linking  its  41  locations 
with  a  fiber  backbone. 

When  Craig  McCaw  founded 
Nextlink  in  1995,  the  goal  was 
to  offer  small-to-midsize  busi¬ 
nesses  voice  services  in  compe¬ 
tition  with  incumbent  LECs. 
Never  known  for  keeping  a  low 
profile,  McCaw  ultimately  shift¬ 
ed  focus.  The  company  now 
aspires  to  become  a  national 
broadband  carrier  offering  local 
and  long-distance  voice,  data 
and  Internet  services,  plus  a 
range  of  application-hosting  ser¬ 
vices,  over  its  own  facilities. 

Owning  the  network  is  key 
because  it  means  Nextlink  can 
offer  better  service  and  higher 
levels  of  quality,  says  Michael 
McHale,  chief  marketing  officer. 

Local  bulk 

Nextlink  is  already  offering 
local  voice  and  data  services  in 
41  cities,  including  New  York, 
Philadelphia,  Washington,  D.C., 
and  Los  Angeles.  By  the  end  of 
2000,  the  company’s  goal  is  to 
be  up  and  running  in  60  cities, 


including  the  top  30  metropoli¬ 
tan  markets. 

The  preferred  approach  to 
building  out  a  city  is 
pulling  432  fibers.  In 
areas  where  that  will 
take  too  long  or 
where  permits  are 
too  hard  to  come  by, 

Nextlink  will  use,  in 
this  order:  wireless 
local  multipoint  dis¬ 
tribution  services 
(LMDS),  digital  sub¬ 
scriber  line  (DSL) 
and  ILEC  facilities. 

Even  though  Next- 
link  is  the  largest  sin¬ 
gle  holder  of  LMDS 
fixed  wireless  licenses  in  the 
country  and  has  170  DSL  Access 
Multiplexer  colocation  agree¬ 
ments  in  place  for  DSL,  fiber  is 
still  the  preferred  approach, 
McHale  says. 

Ultimately,  these  metropoli¬ 
tan  facilities  will  be  intercon¬ 
nected  via  Internext,  a  $700 
million  nationwide  fiber  net¬ 
work  that,  by  the  end  of  2001, 
will  consist  of  24  fibers  span¬ 
ning  16,000  route  miles. 

Nextlink  will  activate  the  first 
portion  of  the  network  in  the 
Dallas/Fort  Worth  area  by  the 
end  of  September  and  turn  up  a 
handful  of  other  metropolitan 
areas  by  year-end.  Originally, 
Nextlink  wasn’t  scheduled  to 
come  online  until  the  end  of  the 
fourth  quarter. 

John  Curran,  vice  president 
of  Internet  technology  and  for¬ 
merly  of  GTE  Internetworking, 
is  heading  up  the  long-haul 
infrastructure  planning.  “Initial¬ 
ly  the  network  will  be  a  combi¬ 
nation  of  ATM  and  IP,”  Curran 


says.  Internext  ultimately  will  be 
pure  IP,  the  technology  cannot 
support  quality  voice  today,  so 
the  network  will  be  a 
hybrid,  Curran  says. 

While  Nextlink’s 
end-to-end  network 
will  be  a  sizable  asset, 
Qwest,  Level  3,  AT&T 
and  MCI  WorldCom 
all  have  somewhat 
similar  stories. 

How  can  Nextlink 
compete  with  such 
formidable  players? 
“Nextlink  has  deep 
pockets,  and  it  has 
attracted  strong  peo¬ 
ple  like  John  Curran 
that  know  how  to  build  infra¬ 
structure,”  says  Michael  Smith, 
associate  research  analyst  at 
Meta  Group  in  Stamford,  Conn. 

And  Nextlink  has  another 
factor  on  its  side:  It  isn’t  the 
ILEC  or  one  of  the  Big  Three 
long-distance  service  providers. 
“There’s  something  about  hav¬ 
ing  a  monopoly  for  so  long.  You 
begin  to  gouge  customers,”  says 
Wendy  Mercer,  head  of  telecom¬ 
munications  services  at 
Hendrick  Manufacturing.  The 
Memphis  maker  of  metal  prod¬ 
ucts  switched  to  Nextlink’s  ser¬ 
vices  last  month  and  expects  to 
save  more  than  50%  on  voice 
services.  Hendrick  was  previ¬ 
ously  using  BellSouth  andAT&T. 
“They’ve  lost  our  business  for¬ 
ever,”  Mercer  says. 

Bundled  pitch 

To  woo  others  that  may  be 
less  inclined  to  swap  carriers, 
Nextlink  plans  to  offer  service 
bundles  that  aren’t  readily  avail¬ 
able  today,  CEO  Hooper  says. 


Nextlink  will  look  at  bund¬ 
ling  everything  from  local  and 
long-distance  voice,  to  dedicat¬ 
ed  Internet  access,  to  managed 
firewall  and  maybe  even  appli¬ 
cation-hosting  services,  says 
Daniel  Kohn,  director  of  strate¬ 
gy.  “We’ll  look  at  radical  stuff  to 
see  what  happens.” 

Nextlink  will  also  explore 
pricing  incentives,  all  in  the 
name  of  changing  the  game  on 
the  incumbents,  Kohn  says.  Cus¬ 
tomers  that  use  Nextlink  appli¬ 
cation-hosting  services  for  four 
programs,  for  example,  might 
get  voice  for  free,  Kohn  says. 

“I  believe,  over  time,  different 
pieces  of  the  communications 
value  chain  will  be  given  away 
for  free  by  different  people,” 


Hooper  says.  Data-centric  ser¬ 
vice  providers  may  offer  free 
voice  services,  while  voice-cen¬ 
tric  providers  may  offer  free 
’Net  access,  and  so  on,  he  says. 

NASP 

Although  Nextlink  doesn’t 
offer  application-hosting  ser¬ 
vices  today,  Kohn  says  it  plans 
to  roll  them  out  by  year-end. 

The  company  is  trying  to 
coin  the  term  “network  applica¬ 
tion  service  provider”  (NASP)  as 
a  way  to  differentiate  itself. 
Kohn  says  Nextlink’s  end-to-end 
control  of  the  net,  stretching 
from  a  customer’s  site  to  where 
applications  are  hosted  in  the 
Nextlink  network,  will  let  the 
company  guarantee  response 
times  and  eliminate  finger 
pointing  if  problems  arise. 

But  instead  of  focusing  on 
high-end  applications  such  as 
ERP  and  human  resource  pro¬ 
grams,  Nextlink  plans  to  host 
lower-end  applications  such  as 
messaging  and  calendaring. 

While  developing  the  net¬ 


work  and  rolling  out  new  ser¬ 
vices  are  central  to  Nextlink’s 
plans,  last  Friday  Nextlink  Pres¬ 
ident  and  Chief  Operating 
Officer  George  Tronsrue  met 
with  Hooper  and  other  com¬ 
pany  executives  to  deliver  a  re¬ 
port  on  opportunities  overseas. 

When  McCaw  identified  in¬ 
ternational  as  being  key  to 
Nextlink’s  future, Tronsrue,  who 
has  built  nets  for  MCI.TCG,  MFS 
and  E.spire,  set  out  to  explore 
the  options. 

His  findings:  Opportunities 
abound  in  Europe,  Latin  Amer¬ 
ica  and  Asia.Tronsrue  says  there 
are  plenty  of  acquisition  targets 
and  chances  to  team  with  oth¬ 
ers.  Although  the  international 
strategy  is  in  flux,  Hooper  and 
company  seem  confi¬ 
dent  that  over  time 
Nextlink  will  be  a  player 
internationally. 

How  can  a  relatively 
new  company  think 
about  overseas  acquisi¬ 
tions?  When  you  have 
McCaw  backing  you,  the 
market  listens.  While 
Nextlink  is  $3  billion  in 
debt,  it  has  raised  $2.5 
billion  in  cash  and  its 
stock  is  going  great  guns. 

In  fact,  Nextlink 
brought  in  Chief  Busi¬ 
ness  Development  Offi¬ 
cer  Scott  MacLeod  from 
Merrill  Lynch’s  Global 
Communications  Group 
to  look  for  acquisition 
targets.  Besides  strong 
hints  that  Nextlink  will 
make  acquisitions  overseas,  it 
could  also  make  a  domestic  ISP 
or  Web-hosting  acquisition. 

Nextlink  resells  PSInet’s 
dedicated,  dial-up  and  Web¬ 
hosting  Internet  access  ser¬ 
vices  today.  While  this  relation¬ 
ship  has  worked  well,  Chief 
Marketing  Officer  McHale  says 
Nextlink  wants  end-to-end 
control  of  the  net.  “Ultimately, 
we  will  build  or  buy  our  own. 
We’ve  hired  a  lot  of  technical 
expertise,  so  we’ll  probably 
build  it.” 

If  all  this  seems  overwhelm¬ 
ing  —  the  cities,  the  national 
backbone,  the  potential  inter¬ 
national  push  —  keep  in  mind 
who  is  the  mastermind:  Craig 
McCaw.  McCaw  built  McCaw 
Cellular  from  nothing  to  the 
country’s  largest  provider  of 
wireless  services  and  then  sold 
it  to  AT&T  for  $1 1.5  billion. 

He  has  a  history  of  building 
highly  leveraged  companies, 
founded  on  the  tenet  that  own¬ 
ing  the  facilities  is  key.  His  for¬ 
mula  has  proven  successful.  3 
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CEO  Steven  Hooper  says  Nextlink  is  fun¬ 
damentally  different  because  it  has  end- 
to-end  control  of  a  high-capacity  net. 
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IBM  to  bulk  up  server  line  with  Sequent  buyout 

But  does  Big  Blue  ideally  need  to  add  another  platform  to  its  crowded  server  lineup? 


BY  MARC  SONGINI 
AND  DENI  CONNOR 

ARMONK,  N.Y  —  IBM’s  announce¬ 
ment  last  week  that  it  plans  to  buy 
Sequent  Computer  Systems  for  $810 
million  raises  lots  of  questions,  but 
perhaps  the  biggest  one  is:  Why  does 
IBM  need  yet  another  server  platform? 

Sequent,  a  Beaverton,  Ore.,  maker  of 
high-end  Intel-based  servers  that  run 
Unix, Windows  NT  or  both,  will  add  its 
NUMA-Q  servers  to  IBM’s  server  line¬ 
up,  which  already  includes  the 
Netfinity,  RS/6000,  AS/400  and  S/390 
mainframe  lines.  Sequent’s  servers  are 
typically  used  to  run  data  warehous¬ 
ing,  business  intelligence  and  other 
heavy-duty  applications. 

IBM  is  high  on  Sequent’s  server 
architecture,  based  on  a  technology 
called  nonuniform  memory  access 
(NUMA),  which  has 


the  potential  to  enable  a  server  to 
scale  up  to  more  than  250  Intel 
processors  (see  sidebar).  IBM  plans  to 
resell  Sequent’s  existing  servers, 
which  IBM  says  fit  right  below  its 
high-end  RS/6000s  and  above  its  low- 
end  RS/6000s  and  high-end  Net- 
finities.  IBM  also  plans  to  work  NUMA 
technology  into  its  Netfinity  and 
RS/6000  servers. 

Bob  Stephenson,  head  of  IBM’s  server 
group,  claims  NUMA  will  be  a  “defining 
technology  for  the  early  21st  century 
for  Unix  and  NT  servers.”  IBM  already 
has  a  group  in  place  that  is  working  on 
NUMA  technology. 

Sequent  customers  are  encouraged 
by  the  deal,  which  they  say  has  the 
potential  to  give  Sequent’s  NUMA 
technology  more  visibility.  Currently, 
Sequent  and  Data  General  are  the  most 
visible  advocates  of  the  technology. 
And  Sequent  has  been  struggling,  post¬ 
ing  a  loss  of  more  than  $50  million  last 
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year  on  revenue  of  just 
under  $800  million. 

“The  acquisition  gives 
Sequent  much  better 
resources  to  compete 
with  the  HPs  and  Suns,” 
says  Dan  Baker,  vice 
president  of  ICG  Com¬ 
munications,  a  competi¬ 
tive  local  exchange  car¬ 
rier  in  Englewood,  Colo. 
“It  gives  them  sales,  mar¬ 
keting,  support  and 
maintenance  resources 
to  move  their  products.” 

However,  not  all  ob¬ 
servers  are  sold  on  the 
wisdom  of  the  purchase, 
which  grew  out  of  a  joint 
venture  among  IBM,  Intel, 
Sequent  and  The  Santa 
Cruz  Operation.  The 
effort,  dubbed  Project 
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IBM  plans  to  sell 
Sequent's  NUMA 
servers  and  add  NUMA 
technology  to  IBM's 
existing  servers. 


Monterey,  is  focused  on  building  a  ver 
sion  of  Unix  designed  to  run  on  Intel’s 
upcoming  64-bit  Merced  processor. 

“IBM  doesn’t  need  Sequent,”  says 
analyst  Frank  Dzubeck,  president  of 
Communications  Network  Architects, 
a  consultancy  in  Wash¬ 
ington,  D.C.  “The  Sequent 
product  lines  don’t  fit  into 
IBM’s  line.”  He  says  IBM, 
rich  with  cash,  just 
thought  Sequent  was  a 
good  buy. 

However,  Dzubeck  ack¬ 
nowledges  that  NUMA  is  a 
solid  multiprocessing  tech¬ 
nology  that  could  benefit 
IBM  customers  and  be¬ 
come  more  prevalent  with 
IBM’s  marketing  muscle 
behind  it. 

The  questions  about 
overlap  among  IBM  and 
Sequent  product  lines, 
as  well  as  assorted  market¬ 
ing  and  branding  issues, 
won’t  be  answered  for 
another  90  days  or  so,  IBM 
says.  3 
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WHAT’S  ALL  THE  FUSS 
ABOUT  NUMA? 


IBM  is  shelling  out  more  than  $800  million  for  Sequent  Computer  Systems  in 
no  small  part  to  get  its  hands  on  Sequent's  nonuniform  memory  access 
(NUMA)  technology. 

NUMA  is  a  form  of  symmetrical  multiprocessing  (SMP)  in  which  every 
processor  in  a  server  has  its  own  local  memory  and  is  able  to  access  other  chips' 
memories  as  needed  to  relieve  potential  bottlenecks.  NUMA  systems  currently 
scale  up  to  64  processors  and  eventually  will  scale  to  more  than  250,  Sequent  says. 

With  traditional  SMP  systems,  shared-memory  buses  typically  cannot  accom¬ 
modate  more  than  32  processors  without  bogging  down. 

NUMA  technology  was  developed  in  the  late  1980s  at  Stanford  University,  and 
Sequent  was  the  first  to  include  it  in  a  product,  in  the  mid-1990s.  Sequent  and  Data 
General  have  been  NUMA's  biggest  proponents. 

Sequent's  customers  include  Boeing  and  Ford,  and  customers  typically  use 
NUMA  servers  to  run  heavy-duty  applications  such  as  enterprise  resource  planning 
and  business  intelligence  programs. 

Most  NUMA  machines  run  on  Intel  processors,  though  the  technology  is  not 
tied  to  any  particular  brand  of  processor.  NUMA  machines  can  cost  hundreds  of 
thousands  of  dollars,  but  Data  General  claims  its  servers  can  cost  one-third  to 
one-half  less  than  rival  SMP  machines.  Sequent's  NUMA  products  cost  some¬ 
what  more  than  typical  SMP  machines. 

Other  vendors,  such  as  Hewlett-Packard  and  Amdahl,  have  dabbled  in  the 
NUMA  market.  In  fact,  HP  has  two  NUMA  models  in  its  server  lineup.  On  the 
other  hand,  PC  server  giants  Dell  and  Compaq  have  said  in  the  past  that  they're 
not  considering  NUMA  in  their  products. 

IBM,  meanwhile,  already  has  a  dedicated  NUMA  team  in  Austin,  Texas,  and 
expects  big  things  for  the  technology  as  demand  for  bigger  enterprise  servers 
increases. 

—  Marc  Songini 
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1 6-way  server  chip  prepped 


BY  DENI  CONNOR 

SAN  JOSE  —  Today’s  hottest  PC 
servers  top  out  at  around  eight  proces¬ 


sors.  But  if  chip  start-up  HotRail  has  its 
way,  1 6-way  servers  with  double  the 
I/O  of  today’s  most  powerful  boxes 
will  be  standard  fare  next  year. 


HotRail’s  multiprocessing  chipset  is 
designed  to  work  with  the  two  hottest 
server  chips  in  town:  Intel’s  Pentium 
III  and  AMD’s  recently  available  Athlon 
processor.  The  HotRail  chipset  is 
meant  to  compete  head  on  with,  or 
even  ultimately  replace,  Intel’s  long- 
delayed  eight-way  Profusion  chipset. 


Profusion,  originally  scheduled  for 
release  at  the  end  of  last  year,  is  now 
set  to  ship  next  month. 

“Anytime  anyone  can  buy  from  more 
than  one  manufacturer,  it’s  always  bet¬ 
ter.  You  have  competitive  position  and 
choice.  Whenever  you  get  a  little  com¬ 
petition,  vendors  tend  to  lower  their 
prices,”  says  Andrew  J.  Dorenkamp,  IS 
manager  for  the  Southern  Ute  Indian 
tribe  in  Ignacio,  Colo. 

AMD  holds  the  chips 

AMD  may  turn  out  to  be  the  key 
player  in  lowering  prices.  The  compa¬ 
ny  helped  spark  the  sub-$  1,000  PC 
market  with  its  inexpensive  Intel-com¬ 
patible  chips  —  which  eventually 
forced  Intel  to  lower  prices.  AMD 
could  conceivably  have  the  same 
impact  on  the  server  market. 

HotRail  expects  to  have  proof  of  its 
concept  by  the  end  of  the  year,  and  if 
all  goes  well  AMD-based  servers  using 
HotRail’s  chipset  may  be  on  the  market 
as  soon  as  next  year. 

HotRail  is  testing  its  chipset  with 
AMD’s  first  CPU  designed  for  multi¬ 
processing,  Athlon,  formerly  code- 
named  K-7.AMD  declined  to  comment 
on  its  server  plans,  but  according  to 
analysts,  Athlon  may  help  AMD  break 
out  of  the  workstation  arena,  where 
it  has  almost  as  big  a  share 
as  Intel. 

One  analyst  is  bullish  on  the  prom¬ 
ise  of  HotRail.  “If  HotRail  can  deliver 
Athlon  system  logic  that  lives  up  to  its 
advance  billing,  then  it  will  have 
absolutely  no  trouble  getting  an  audi¬ 
ence  at  Intel  and  every  major  server 
OEM  out  there,”  says  Peter  Glaskow- 
sky,  an  analyst  with  Microprocessor 
Report.  If  Intel  backs  HotRail,  rather 
than  fighting  it,  16  processors  could 
quickly  become  standard  in  the 
server  world. 

The  HotRail  chipset  uses  a 
switched  fabric  design  that  gives  I/O 
and  CPUs  equal  access  to  system 
memory,  allowing  users  to  see  almost 
linear  performance  as  processors 
increase,  HotRail  claims. 

HotRail  has  already  shown  Intel  and 
Compaq  its  chipset  plans.  Intel 
declined  to  comment  on  the  possibili¬ 
ty  of  using  the  HotRail  chip,  but  Mitch 
Shults,  director  of  Next  Generation 
I/O  initiative  marketing  for  Intel,  says, 
“The  HotRail  design  is  intriguing  if  it 
works.  If  HotRail  pulls  this  off,  it’s 
pretty  cool  stuff.” 

Glaskowsky  says  that  HotRail’s 
largest  advantage  over  the  Profusion 
chipset  will  be  in  CPU  access  to  mem¬ 
ory.  “The  memory  bandwidth  of  the 
HotRail  chipset  looks  to  be  at  least 
twice  the  memory  bandwidth  of 
Profusion.  Likewise  it  looks  like  the 
I/O  bandwidth  could  be  two  times 
or  better  than  Profusion.  HotRail 
alleviates  these  two  most  common 
sources  of  bottlenecks  in  server 
architecture.”  B 
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The  Seagate  Software,  NSMG  and  VERITAS  merger  has 
re-defined  the  ultimate  in  solutions  that  help  protect, 
access,  and  manage  your  business-critical  information. 
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VERITAS®  offers  a  complete  range  of  leading  enterprise-class  application  storage 
management  software  solutions  that  can  help  you  meet  the  increasing  demand  to  protect, 
access  and  manage  your  business  critical  information.  For  more  information  about  VERITAS 
products,  call  1-800-729-7894,  extension  81017  or  visit  our  web  site  at  www.veritas.com. 
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E-biz  to  be  hot  topic  at  CA-World 


E- 


BY  JEFF  CARUSO 

Computer  Associates  will 
invade  New  Orleans  this 
week,  hoping  to  serve  its  users 
a  spicy  plate  of  e-business, 
another  course  of  e-commerce 
and  a  side  order  of  3-D 
Unicenter. 

At  its  CA-World  user  confer¬ 
ence,  the  company  will  explain 
how  its  management  software 
will  help  conduct  e-business.  CA 
uses  that  term  to  refer  to  die 
activities  that  surround  die  sales 
process,  such  as  order  fulfillment 
and  catalog  updating.  CA  began 
its  e-business  thrust  in  April, 
when  it  created  a  new  division 
focused  on  e-business  and  elec¬ 
tronic  commerce. 

CA  needs  to  address  the 


management  of  electronic 
business  technologies,  espe¬ 
cially  because  Tivoli  started 
shipping  its  Cross-Site  product 
aimed  at  that  area  in  April,  says 
Philip  Mendoza,  an  analyst  at 
International  Data  Corp.  in 
Framingham,  Mass. 

Managing  e-business  and  e- 
commerce  applications  is  a  lot 
more  difficult  than  managing 
an  enterprise  infrastructure, 
Mendoza  says.  It  requires  that 
companies  reach  outside  then- 
own  firewalls  and  manage  then- 
partners’  and  suppliers’  re¬ 
sources,  something  businesses 
haven’t  had  to  do  before. 

CA  is  as  hot  for  this  market  as 
a  steaming  bowl  of  gumbo. “No 
one  is  going  after  e-business 
like  CA,”  says  Peter  Kastner, 


chief  research  officer  at  Aber¬ 
deen  Group  in  Boston. 

CA  said  last  month  that  it  will 
bring  its  neural-network  agent 
technology  and  recently  ac¬ 
quired  Platinum  information 
management  technology  to 
bear  on  the  problems  of  con¬ 
ducting  business  electronically. 
One  application  would  let  the 
agents,  called  Neugents,  learn 
the  patterns  of  behavior  of  Web 
site  visitors  to  better  target 
them  for  online  sales. 

Neugents  are  a  relatively  new 
technology  for  CA.  They  can 
study  patterns  in  any  behavior 
and  use  those  patterns  to  pre¬ 
dict  future  behavior,  the  com¬ 
pany  says. At  this  point,  the  only 
Neugent  available  is  designed  to 
watch  Windows  NT  servers,  but 


the  company  has  announced 
plans  to  bring  the  technology 
to  Unix  servers  as  well. 

Neugents  are  part  of  the  next 
version  of  Unicenter,  called  The 
Next  Dimension  (TND).  CA  has 
been  talking  about  Unicenter 
TND  for  a  year,  will  show  it  this 
week  and  plans  to  ship  it  by 
year-end. 

Another  feature  of  TND  will 
be  the  ability  to  look  at  man¬ 
agement  data  over  time,  and 
this  will  come  about  as  CA 
builds  TND  on  a  repository 
based  on  the  company’s 
Jasmine  database. 

Jasmine  is  a  separate  product 
that  CA  is  currently  developing 
into  a  new  version  called 
Jasmine  TND.  Announced  last 
month,  Jasmine  TND  em¬ 
beds  Neugent  technology  that 
can  be  applied  to  any  data. 
Jasmine  TND  will  start  beta  tests 
this  week.  [2 


Moving  up  the  bandwidth  ladder 

Four  new  flavors  of  ADSL  plus  one  of  SDSL  are  on  tap 


from  BellSouth: 

Downstream 
speed  in  bit/sec 

Upstream 
speed  in  bit/sec 

Monthly  price 

768K 

512K 

$134 

1.5M  to  1.8M 

51 2K  to  768K 

$195 

2M  to  4M 

640K  to  896K 

$450 

4M  to  6M 

640K  to  896K 

$850 

384K 

384K 

$140 

Note:  Installation  charges  apply.  Term  and  volume  discounts  available. 


DSL, 

continued  from  page  1 

strength  multimegabit  services 
that  take  ADSL  out  of  the  indi¬ 
vidual  telecommuter  arena  and 
deeper  into  the  enterprise. 

BellSouth ’s  move  will  come 
hard  on  the  heels  of  an 
announcement  last  week  by 
Bell  Atlantic  that  it  is  finally 
offering  DSL  in  New  York  City 
in  the  face  of  potential  cable- 
modem  competition  from  Time 
Warner  and  other  companies. 
Bell  Atlantic  also  introduced 
two  higher-speed  ADSL  ver¬ 
sions  —  one  with  1.6M  bit/sec 
and  the  other  with  7.1M 
bit/sec  downloads  —  initially 
available  in  four  other  cities. 

But  BellSouth ’s  five  new  ser¬ 
vices  will  have  a  broader  roll¬ 
out:  the  same  28  cities  where 
the  carrier  today  offers  a  stan¬ 
dard  ADSL  offering  of  up  to 
1.5M  bit/sec  speed  down¬ 
stream  and  up  to  256K  bit/sec 
upstream. 

The  three  most  robust  of 
BellSouth  s  new  service  classes 
will  provide  anywhere  from 
1.5M  to  6M  bit/sec  downloads. 
The  RBCX:  will  also  add  one 
new  lower-speed  ADSL  varia¬ 
tion,  plus  a  symmetrical  DSL 
service  that  provides  384K 
bit/scc  both  ways  (see  graphic). 

The  pricing  BellSouth  is 
offering  technically  beats  most 
of  the  carrier’s  T-l  dedicated 
access  prices.  One  new  option 
offering  T-l  downstream  and 
5 1 2K  to  768K  bit/sec  upstream 
is  priced  as  low  as  $195  per 
month.  This  compares  with  an 


average,  though  widely  varying, 
$700  per  month  for  regular T-ls 
in  the  BellSouth  region. 

But  analysts  and  competitors 
caution  that  it’s  probably  not 
wise  for  BellSouth  users  to 
throw  out  their  existing  T-l 
lines.  Laurie  Falconer,  a  DSL  ana¬ 
lyst  for  consulting  firm  Tele- 
Choice,  believes  the  1 .5M/5 12K 
bit/sec  flavor,  even  at  $195, 
won’t  cause  branch  offices  to 
discard  their  T-ls.  It  may  attract 
“small  businesses  that  never 
wanted  to  go  to  a  T-l,”  she  says. 

John  Cahill,  BellSouth  s  direc¬ 
tor  of  advanced  network  ser¬ 
vices,  says  the  new  DSL  options 
running  up  to  6M  bit/sec  will 
likely  serve  new  applications 
such  as  electronic  commerce 
and  videoconferencing,  and 
could  supplement  existing 
enterprise  access  options. 

All  the  BellSouth  DSL  ser¬ 
vices  will  be  terminated  on 
Alcatel  1000-series  DSL  access 
multiplexers  (DSLAMs)  in  cen¬ 
tral  offices.  Cahill  concedes 
that  the  higher  the  bandwidth 
available  the  closer  that  end 


users  will  need  to  be  from  the 
central  office. 

Data  CLEC  NorthPoint  Com¬ 
munications  thinks  it  has  a  bet¬ 
ter  answer.  The  San  Francisco- 
based  company  specializes  in 
SDSL,  so  that  users  who  pull 
down  Web  traffic  and  host  Web 
servers  don't  have  to  sacrifice 
bandwidth  in  either  direction. 

To  maintain  the  symmetrical 
nature  of  its  offering  but  enter 
the  above-T-1  market,  North- 
Point  this  week  is  expected  to 
announce  “bonded  DSL”  capa¬ 
bility  with  its  DSLAM  provider, 
Copper  Mountain.  This  type  of 
feature  lets  two  unbundled  cop¬ 
per  loops  offer  up  to  3M  bit/sec 
of  throughput  both  down¬ 
stream  and  upstream  via  a  logi¬ 
cal  linking  of  two  ports  on  the 
DSLAM  to  the  same  end  user. 
NorthPoint  will  roll  out  the  3M 
bit/sec  SDSL  service  in  the 
fourth  quarter,  says  John 
Stormer,  NorthPoint’s  vice  pres¬ 
ident  of  marketing. 

NorthPoint’s  options  will 
make  it  unnecessary  for  cor¬ 
porate  DSL  network  managers 


to  institute  and  enforce  usage 
policies  the  way  they  might 
have  to  with  telco  ADSL, 
Stormer  says. 

BellSouth  users  may  also 
have  to  be  careful  of  technical 
hurdles.The  telco  is  charging  a 
$300  installation  fee  for  each 
DSL  loop  on  each  of  its  five 
new  services.  That  will  cover 
most  of  the  necessary  loosen¬ 
ing  of  loop  coils  and  bridge 
taps  in  the  copper  infrastruc¬ 
ture,  Cahill  says.  However, 
Cahill  cautions  that  some  of 
this  loop  conditioning  may  not 
be  possible  if  such  bottlenecks 
are  “buried  under  years”  of 
copper  installations. 

The  BellSouth  and  North- 
Point  announcements  may  be 
just  the  start  of  DSL  announce¬ 
ments.  Network  World  also 
obtained  a  recent  GTE  tariff  fil¬ 
ing  that  reveals  GTE  is  institut¬ 
ing  a  new  serv  ice  called  ADSL 
Bronze  Plus  later  this  month. 

The  consumer  or  telecom¬ 
muter  offer  provides  768K 
bit/sec  downstream  and  128K 
bit/sec  upstream  for  $40 
per  month  with  a  $60  installa¬ 
tion  charge.  The  monthly 
price  comes  down  to  $32.50 
for  users  who  sign  a  one- 
year  contract.  A  GTE 
spokesman  says  the  carrier 
will  combine  the  one-year 
deal  with  a  $17.45-per-month 
Internet  access  service  for  a 
total  consumer  package  of 
$45.95  per  month.  S 
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News 


Alteon  and  Foundry  file  plans  to  go  public 


BY  JEFF  CARUSO 

A  chapter  in  the  saga  of  LAN  hard¬ 
ware  development  came  to  a  close 
last  week,  as  the  last  two  of  the  so- 
called  Gigabit  Ethernet  start-ups  filed 
for  their  initial  public  offerings. 

The  S-l  statements  that  Alteon 
WebSystems  and  Foundry'  Networks 
filed  with  the  Securities  and  Ex¬ 
change  Commission  reveal  informa¬ 
tion  that  the  companies  until  now 
have  been  able  to  keep  to  themselves. 

The  S-ls  require  Alteon  and 
Foundry  to  provide  figures  on  rev¬ 
enue,  earnings  and  losses,  as  well  as 
detailed  descriptions  of  their  busi¬ 
ness  risks. 

Alteon  has  sustained  losses  every 
quarter  and  continues  to  lose  money, 
according  to  the  company’s  S-l  docu¬ 
ment.  In  the  nine  months  ended 
March  31, Alteon  posted  a  loss  of  $8.6 
million  while  generating  revenue  of 
$18.4  million.  As  of  March  31,  the 
company’s  accumulated  deficit  was 
$27.5  million. 

As  required  in  S-l  statements, 
Alteon’s  document  provides  many 
cautionary'  notes. 

“Although  our  net  sales  have  grown 
in  recent  quarters,  we  may  not  be 
able  to  achieve  future  revenue 
growth  or  achieve  or  sustain  prof¬ 
itability,”  the  statement  notes. 

Alteon  earlier  this  year  changed  its 
name  from  Alteon  Networks  to  Alteon 
WebSystems,  as  part  of  an  effort  to  de- 
emphasize  its  Gigabit  Ethernet  roots 
and  capitalize  on  the  network  needs 
of  Web-based  data  centers  OVW, 
March  29,  page  1). 

Foundry*  has  fared  better  finan¬ 
cially,  having  earned  nearly  $3  million 
in  the  first  six  months  of  this  y’ear  on 
revenue  of  about  $40  million. 

In  1998,  however,  the  company 
lost  $9.4  million  on  revenue  of  $17 
million. 

Most  other  Gigabit  Ethernet  start¬ 
ups  have  been  sw’allowed  up  over  the 
past  few  years. The  only  other  start-up 
to  go  public  was  Extreme  Networks, 
which  pulled  in  revenue  of  roughly 
$60  million  in  the  nine  months  ended 
March  31  and  lost  $3  5  million. 

In  its  most  recent  quarter.  Extreme 
eked  out  earnings  of  $733,000. 

Alteon’s  and  Foundry’s  S-l  state¬ 
ments  acknowledge  the  risk  Cisco 
poses  to  their  businesses.  Foundry 
say’s  Cisco  has  a  “dominant”  position 
in  the  market  and  that  several  Cisco 
products  compete  directly  with 
Foundry's  switches.  Alteon  says  it 
believes  Cisco  plans  to  introduce  a 
product  that  would  directly  compete 
with  Alteon  Web  switches. 

Alteon  and  Foundry'  also  revealed 


that  they  get  large  chunks  of  their  rev¬ 
enue  from  a  small  number  of  compa¬ 
nies,  mainly  through  OEM  agreements. 


Sun,  Fuji  Xerox  and  3Com  accounted 
for  about  two-thirds  of  Alteon’s  rev¬ 
enue  in  1998,  w’hile  America  Online, 


Hewlett-Packard  and  Mitsui  generated 
more  than  40%  of  Foundry  s  revenue  in 
the  first  six  months  of  this  vear.  A 


*  v 
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On  the  net  without  a  net? 


You  need  a  firewall,  an  affordable,  easy  to  use  solution  that  has  rock-solid  security,  supports 
all  your  Internet  needs,  and  that  you  can  trust  to  stay  with  you  as  the  Internet  grows  and  changes. 

BorderWare  has  been  providing  this  to  thousands  of  users  since  the  Internet  explosion  began. 
Version  6  introduces  new  advanced  features,  better  performance  and  lower  cost  of  ownership. 
Find  out  how  BorderWare  can  be  your  safety  net  today.  Visit  www.borderware.com 


BORDERWARE 

_ I  Tedmologies  Inc. 


90  Burnhamthorpe  Rd.  West,  Suite  1402,  Mississauga,  Ontario,  Canada,  L5B  3C3 
Toll  Free  1-877-814-7900 
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SPECIAL  OFFER — Fra  m  e  Vi  si  o  n  Starter  Kit 

www.kentrox.com/starterkitca 
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FrameVision™  Frame  Relay  SLA  monitoring  from 
ADC  Kentrox  takes  the  guesswork  out  of  managing  your 
network  performance.  And  with  the  FrameVision  Starter 
Kit,  you  can  take  your  first  look  at  what's  going  on  with 
your  WAN  traffic — risk-free! 

Order  the  FrameVision  Starter  Kit  by  July  31,  1999,  and 
you  can  start  to  monitor  your  Frame  Relay  SLA.  Try  this 
special  offer,  priced  at  $2,295 — and  save  an  additional 
$150  if  you  order  by  May  31,  1999. 

For  more  information  call  1-800-733-5511  or  visit 
www.kentrox.com/starterkitca.  Or  call  your  ADC  Kentrox 
reseller  today  to  place  an  order  (Model  #72601). 

It's  the  risk-free  way  to  give  yourself  the  power  and 
information  to  make  smart  network  decisions. 
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What  You  Should  Know  About  Your 
Frame  Relay  SLA  Performance. 


Kentrox* 

Redefining  Network  Access™ 
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13.  □  Aerospace 

14.  □  Consulting  (Independent)  * 

15.  □  Carriers/Service  Providers 

16.  □  Internet  Service  Provider  (ISP) 

17.  □  Manufacturing  (Computer/ 

Communications/OEM) 

18.  □  Resellers  Of  Computer/Network 

Products  (VARs.VADs)* 

19.  □  Systems/Network  Integrators' 

20.  □  Distributors  (Computer/ 

Communications)* 

21.  □  Other  (please  specify) 

'Attn  Consultants,  integrators, 

Distributors,  Resellers:  Please  complete 
entire  form  based  on  AIL  clients  and 
own  business  needs 

2. 

P:  What  is  your  primary  job  function?  (check  one  only) 

S:  What  is  your  secondary  job  function?  (check  all  that  apply) 

P  s 

j  □  1.  □  Network  Management 
□  2.  □  LAN  Management 
;  □  3.  □  Datacon/Telecom  Management 

,  □  4.  □  IS/IT/MIS/CIO/CTO/Systems 

Management 

P  s 

□  5.  □  Intemet/lntranet/E-Commerce 

Mgmt,  Webmaster 

□  6.  □  Engineering  Management 

P  S 

□  7.  □  Corporate  Management  (CEO, 

COO,  CFO,  Pres.,  VP,  Dir.,  Mgr.) 

□  8.  □  Consultant  (Independent) 

□  9.  □  Other  (please  specify) 

What  is  the  estimated  value  of  Network  equipment  and  services  that  you  specify, 

recommend  or  approve  the  purchase  Of?  (Please  print  the  appropriate  number  code  on  the  line  next  to  each 
pruducl  category.  Please  complete  ALL  categories  A-N.) 


1  $100  Million  or  more 

2.  $50  Million  to  $99.9  Million 

3.  $25  Million  to  $49.9  Million 

4.  $10  Million  to  $24.9  Million 

5.  $1  Million  to  $9.9  Million 

6.  $100,000  to  $999,999 

7.  $50,000  to  $99,999 

8.  Under  $50,000 

9.  None  of  the  above 


A  _ Large  Systems 

(Mainframes/Minis) 

B  _ Desktops  (Micros/Laptops/ 

Worhstations/PDAs) 

C  _ Servers 

D  _ LANs 

E  _ WAN  Equipment 

F  _ Carrier  Services 


G 

H 

I 

J 

K 

L 

M 

N 


_  Internetworking 
.  Internet 
.  Intranet 

_  Extranet/Ecommerce 
_  Remote  Access 
.  Peripherals  (including  storage) 
_  Software 
_  Service/Support 


m 


a  What  is  the  total  number  of  sites  for  which  you  have  purchase  influence? 

(check  ONE  only) 


1.0  100+  2.  0  50  -  99  3.  0  20  -  49  4.  □  10-19  5.0  2-9  6.0  1 


7.  O  None 


What  is  the  total  number  of  Servers/Clients/LANs  installed/planned  at  your  location/ 
in  your  entire  organization?  (check  one  bar  in  each  column) 


SERVERS 

Al  Location 
A 

□  1.  50,000+ 

□  2.  10,000  to  49,999  □ 

□  3.  1,000  to  9,999  □ 

□  4.  100  to  999 

□  5.  50  to  99 

□  6.  10  to  49 

□  7.  1  to  9 

□  8.  none 


Entire  Org. 


□ 

□ 

□ 

□ 


At  Location 
C 

□  1.  50,000+ 

□  2. 


CLIENTS 

Entire  Org. 
D 

□ 

10,000  to  49,999  □ 


□  3.  1,000  to  9,999 

□  4.  100  to  999 

□  5.  50  to  99 

□  6.  10  to  49 

□  7.  1  to  9 

□  8.  none 


□ 

□ 

□ 

□ 

□ 

□ 


At  Location 
E 

□  1.  50,000 

□  2. 


LANS 

Entire  Org. 
f 

□ 

10,000  to  49,999  □ 


□  3.  1,000  to  9,999 

□  4.  100  to  999 

□  5.  50  to  99 

□  6.  10  to  49 

□  7.  1  to  9 

□  8.  none 


□ 

□ 

□ 

□ 

□ 

□ 


7  What  is  your  scope  and  involvement  in  purchasing  decisions  for  network  products  and 
services  for  your  enterprise? 

A.  Scope  (check  ONE  only) 

CORPORATE: 

1.  □  Entire  Enterprise/Multiple  Enterprises 

2. D  Division/Multiple  Divisions 

3.  C  Department 

4.  C  None 

B.  Involvement  (check  ALL  that  apply) 

!.□  Create  Network/IT  Strategy  4.D  Evaluate  Products/Services 

2. D  Recommend/Specify  Brand  5.  □  Determine  the  Need 

3.  □  Approve  Purchase  6.  □  None 

/  What  is  the  estimated  number  ot  employees  at  your  location/in  entire  organization? 

(check  ONE  in  each  section) 

A.  At  your  location: 

1.  □  Over 20,000  6.  □  500-999 

2.  □  10.000-19,999  7.  0  250  -  499 

3.  □  5,000  -  9,999  8.  □  100  -  249 

4.  □  2,500  -  4.999  9.  □  99  or  less 

5.  D  1,000  -  2,499 

8.  Entire  organization: 

1.  □  Over  20,000  5.  □  1,000-2,499 

2.  □  10,000-19,999  6.  □  500-999 

3.  □  5,000-9,999  7.  □  499  or  less 

4.  □  2,500-4,999 

Please  indicate  the  Network  hardware/software/services  that  you  are  currently  involved  in 
purchasing  or  plan  to  purchase:(checfc  all  thatappty) 

A.  Currently  involved  in  purchasing  B.  Plan  to  purchase 


COMPUTERS/PERIPHERALS 
A  B  A 

□  1.  □  Laptops/Notebooks/PDAs  □  5. 

□  2.  0  PCs 

□  3.  □  Windows  Terminals/Thin  Clients  □  6. 

□  4.  □  Workstations  □  7. 

SOFTWARE/APPLICATIONS _ 


□  Storage/Backup 
(Optical,Disk,Tape,RAID) 

□  Printers 

□  Printer/Fax/Copier  Hybrids 
(Multifunction  Printers) 


A  B 

□  13.  □  Network  Management 

□  14.  □  Systems  Management 

□  15.  □  Security 

□  16.  □  Directory  Services 

□  17.  □  Operating  Systems 

□  18.  □  Applications  Development  Tools 

□  19.  □  Database  Management/RDBMS 

□  20.  □  Groupware 

SERVICES _ 

A  B 

□  35.  □  BPO  (Business  Process 

Outsourcing  incl.  Financial 
Services,  HR,  Logistics  etc.) 


A  B 

□  21.  □  E-Mail 

□  22.  □  Enterprise  Resource  Planning 

(ERP) 

□  23.  □  EDI 

□  24.  □  Desktop  Videoconferencing 

□  25.  □  Imaging 

□  26.  □  Middleware/Serverware 

□  27.  □  Document  Management 


A  B 

□  8.  □  Minis 

□  9.  □  Mainframes 

□  10.  □  Fax/Modem  Boards 

□  11.  □  Memory/Chips/Boards/Cards 

□  12.  □  Other  Computers/Peripherals 


A  B 

□  28.  □  Site  Metering  Tools 

□  29.  □  DataWarehousing 

□  30.  □  Anti  Virus  Software 

□  31.  □  Multimedia 

□  32.  □  Y2K  Conversion  Software 

□  33.  □  Helpdesk 

□  34.  □  Other  Software/Applications 


A  B  A  B 

□  36.  □  Applications  Outsourcing  □  39.  □  Education/Training  Services 

□  37.  □  Call  Center  Outsourcing  □  40.  □  Other  Services 

□  38.  □  Systems  Integration/Consulting  A  B 

None  ofthe  above  (1-40)  □  41.  □ 


If)  Please  indicate  the  platforms  that  are  currently  installed/planned:  icheckALLthatappiy) 

J  -7  j]  A.  Currently  installed  B.  Planned  for  purchase 

NETWORK  PROTOCOLS 

A  B 

□  01.  D  TCP/IP 

:  □  02.  □  IPv6 

□  03.  □  SNA 

LAN/WAN  ENVIRONMENT 

A  8 

□  04.  □  Novell  1PX/SPX 

□  05.  □  APPC/APPN/LU  6.2 

□  06.  □  NETBIOS/NETBUEI 

A  B 

□  07.  □  NFS 

□  08.  □  SNMP 

□  09.  □  Other  Network  Protocols 

A  B 

□  10.  □  Gigabit  Ethernet 

□  11.  □  Switched  Ethernet 

□  12.  □  Fast  Ethernet 

□  13.  □  Ethernet 

□  14.  □  ATM 

□  15.  □  Token  Ring/Token  Ring  Switching 
NETWORK  OPERATING  SYSTEM 

A  B 

□  16.  □  IP  Switching 

□  17.  □  Layer  3,4  Switching 

□  18.  □  FDDI 

□  19.  □  100Base-T 

□  20.  □  lOBase-T 

□  21.  □  Fibre  Channel 

A  B 

□  22.  □  Wireless 

□  23.D  DSL 

□  24.  □  ISDN 

□  25.  □  Frame  Relay 

□  26.  □  Private  Line  Tl,  T3,  FT-1,  SONET 

□  27.  □  Other  LANAVAN  Environment 

A  B 

□  28.  □  Windows  NT/Windows  2000 

□  29.  □  Novell  (NetWare  5JQ 

□  30.  □  Novell  (NetWare  4.X) 

□  31.  □  Novell  (NetWare  2.X.3.X) 

COMPIITFR  nPFRfiTINn  SYSTFM 

A  B 

□  32.  □  LINUX 

□  33.  □  Microsoft  (LAN  Manager) 

□  34.  □  Banyan  (Vines) 

A  B 

□  35.  □  IBM  (LAN  Server) 

□  36.  □  Other  Network  Operating  System 

A  B 

□  37.  □  NT  Workstation 

□  38.  □  Windows  2000 

□  39.  □  Windows  98/95/3.1 

□  40.  □  Intel  based  UNIX 

□  41.  □  RISC  based  UNIX  (ind  SOLARIS) 

A  B 

□  42.  □  LINUX 

□  43.  □  DOS 

□  44.  □  OS/2, OS/2  WARP 

□  45.  □  OS/400 

□  46.  □  IBM  MVSAWVSE/ESA 

A  B 

□  47.  □  Digital  VMS 

□  48.  □  Macintosh 

□  49.  □  Other  Computer  Operating  System 

A  B 

None  of  the  above  (1-  49)  □  50.  □ 

Which  ot  the  following  hardware  platforms  are  installed/planned  in  your  company? 

|  L’.Lc^  (check  ALL  that  apply) 

A  -  Mainframes 

B  -  Minis  (Midrange) 

C  -  Workstations 

(Large  Scale) 

1.  □  IBM  RS/6000 

1.  □  Sun  Microsystems 

1.  □  IBM 

2.  □  IBM  AS/400 

2.  □  H-P 

2.  □  Other 

3.  □  DigitalfTandem/Compaq 

3.  □  Digital/Compaq 

4.  □  Unisys 

4.  □  IBM 

5.  □  H-P 

5.  □  Silicon  Graphics 

6.  □  Other 

6.  □  Other 

What  is  the  estimated  gross  revenue  of  your  entire  company/institution? 

(check  ONE  only) 


□  $100  Million  or  More 

□  $50  Million  to  $99.9  Million 

□  $25  Million  to  $49.9  Million 

□  $20  Million  to  $24.9  Million 


5.  □  $10  Million  to  $19.9  Million 

6.  □  $5  MiUion  to  $9.9  Million 

7.  □  $1  Million  to  $4.9  Million 

8.  □  $500,000  to  $999,999 


9.  □  $250,000  to  $499,999 

10.  □  $100,000  to  $249,999 

11.  □  None  of  the  above 


For  which  areas  outside  of  the  US  do  you  have  purchase  influence? 

(check  ALL  that  apply) 


1.  □  Europe 

2.  □  Asia 


3.  □  South  America 

4.  □  Australia 


□  Middle  East 

□  Africa 


8.  □  Canada 

9.  □  None 


FORM:  9901 
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Key  DSL  flavor  faces 


Apply  for  your  FREE  subscription  to 
Network  World  today!  Simply  follow 
these  three  easy  steps: 

O  Answer  ALL  the  questions 
©  Sign  and  date  the  form 
©  Mail  today! 


POLLUTION 


$  1 29.- 
VALUE! 

For  faster  service,  subscribe  online  at:  ^ 

http://www.nwwsubscribe.com/nbbi 


Start-ups  aim  to  change  hp  lays  out 
how  hardware  is  built  Op^view 

___  unification  plan 


x»w  n  A..4i,«hb 


1  aline 


’nwfuiitn 


omi»: 


1.  FOLD  HERE  &  MAIL  TODAY  - 


EACH  QUALIFIED 
SUBSCRIPTION 
INCLUDES: 


^  51  FREE  issues  of 
Network  World 


►  6  Signature  Series 
special  issues  on 
key  industry  players 
and  trends 


►  Product  reviews, 
buyers  guides, 
management  surveys 
and  more! 


Your  colleagues  may  also  qualify 
for  a  FREE  subscription! 


Please  list  below  names  and  job  functions  of  other  individuals  at  your  location  who  might  also  benefit 

from  a  FREE  subscription  to 


NAME 

FUNCTION 

NAME 

FUNCTION 

NAME 

FUNCTION 

NAME 

FUNCTION 

NAME 

FUNCTION 

BUSINESS  REPLY  MAIL 

FIRST-CUSS  MAIL  PERMIT  NO  1752  NORTHBROOK  IL 
POSTAGE  WILL  BE  PAID  BY  ADDRESSEE 


PO  BOX  3091 

NORTHBROOK  IL  60065-9928 


Briefs 


Madge  Networks  has  in¬ 
creased  the  capacity  of  its 
High-Speed  Token  Ring  (HSTR) 
switch  and  added  support  for 
the  Linux  operating  system  to 
its  token-ring  network  adapters. 
New  modules  for  the  Smart 
Ringswitch  hold  30  copper  or 
fiber-optic  HSTR  ports.  Previ¬ 
ously,  Madge  supported  up  to 
12  ports  per  module.  The  new 
modules  will  ship  next  month 
and  will  cost  $4,900. 


Madge  airs  higher-density 
token-ring  modules. 


The  Linux  support  appears  on 
Madge's  Smart  100/16/4  PCI 
Ringnode  adapters.  The  driver 
was  developed  so  that  compa¬ 
nies  can  include  servers,  fire¬ 
walls  and  other  devices  running 
Linux  in  their  token-ring  nets. 


F5  Networks  last  week 
announced  a  new  version  of 
its  Internet  traffic  controller 
that  can  handle  twice  as  much 
throughput  as  the  previous 
version.  And  an  additional 
upgrade,  due  in  the  fourth 
quarter,  will  provide  another 
significant  throughput  break¬ 
through. 

The  company's  Big/IP  Con¬ 
troller  is  a  hardware/software 
offering  that  ensures  Web  site 
traffic  is  balanced  evenly 
among  servers  and  other  net¬ 
work  devices. 

The  F5  product  now  can  han¬ 
dle  350M  bit/sec  of  throughput, 
up  from  170M  bit/sec.  The  edi¬ 
tion  due  in  the  fourth  quarter 
has  been  tested  at  up  to  600M 
bit/sec,  according  to  F5. 

The  performance  boosts  will 
be  free  for  existing  customers 
with  maintenance  contracts. 
Pricing  for  F5's  Big/IP  Con¬ 
trollers  starts  at  about  $10,000. 


nf rastructur 


_  TCP/IP,  LAN/WAN  Switches,  Routers,  Hubs,  Access  Devices, 

Clients,  Servers,  Operating  Systems,  VPNs,  Networked  Storage 

3Com  goes  mobile  with  NIC  management 


Company  also  improves  desktop  and  server  network  interface  card  management  offerings. 


Monitoring  a  NIC's  'heartbeat' 


3Com's  EtherLink  NICs  issue  'heartbeat'  signals  that  allow  network  managers  to 
monitor  the  health  of  networked  computers. 

Management  station 

©  Software  on  the  NIC  sends  a  heartbeat  signal 


to  a  remote  management  station,  signaling 
that  the  PC's  network  connection  is  healthy. 


mm  I  j/i  i  i 


Client  A 

Status:  OK 


Client  B 

Offline  at  1:30pm  7/19/99 


BY  JIM  DUFFY 

SANTA  CLARA,  CALIF.  —  3Com  last 
week  introduced  a  new  network  inter¬ 
face  card  that  extends  much  of  the  com¬ 
pany’s  desktop  and  server  management 
technology  to  mobile  computers. 

While  managing  desktop  PCs  and 
servers  can  be  challenging,  managing 
mobile  computers  can  be  even  tougher, 
given  that  end  users  on  the  go  may  be 
accessing  the  corporate  network  from 
any  number  of  locations. 

The  company’s  Megahertz  10/100  LAN 
CardBus  PC  Card  uses  3Com’s  Dynamic- 
Access  software  —  including  its  network 
performance  manager,  LAN  agent, 
Managed  PC  Boot  Agent  and  Remote 
Wake  Up  technology.  DynamicAccess 
now  lets  IT  managers  remotely  set  up 
new  mobile  computers,  monitor  their  net¬ 
work  environments,  diagnose  and  repair 
damaged  systems,  and  perform  company- 


©  In  the  event  of  a  failure,  such  as  a  power  outage 
or  theft,  the  heartbeat  signal  stops. 


wide  software  installations  or  upgrades. 

DynamicAccess  also  features  technol¬ 
ogy  called  Mobile  Connection  Manager, 


©  Managers  can  view  which  machines  are  on  or 
off  the  network.  When  a  machine  goes  off¬ 
line,  a  timestamp  of  when  the  failure  occurred 
is  sent  to  the  management  station. 


which  lets  IT  managers  create  and  export 
multiple  LAN  configurations,  so  a  note- 
See  3Com,  page  1 8 


Sun  adds  luster  to  server  clusters 


Solaris  Resource  Manager  1.1  controls  multiple  apps  on  clusters. 


BY  DENI  CONNOR 

PALO  ALTO  —  Sun  last  week  rolled 
out  software  that  makes  it  easier  for  net¬ 
work  managers  to  control  multiple 
applications  running  on  clusters  of  Sun 
servers. 

Solaris  Resource  Manager  1.1,  which 
will  come  as  part  of  the  Solaris  7  oper¬ 
ating  system,  lets  managers  allocate  and 
control  system  resources  on  servers 
running  Sun’s  clustering  software. 

For  example,  the  management  soft¬ 
ware  can  be  used  to  control  the  number 
of  processes  running  on  a  server,  the 
amount  of  virtual  memory  used  and  the 
CPUs  that  are  used  for  applications. 

Version  1.1  works  on  clusters  run¬ 
ning  Sun  Cluster  2.2  software,  which 
allows  servers  to  be  clustered. 

The  original  version  of  Solaris 
Resource  Manager  worked  with  Solaris 
2.6  and  was  designed  for  managing 
single  servers. 

Solaris  Resource  Manager  makes  it 
easier  for  companies  to  consolidate  their 
servers  by  managing  multiple  applica¬ 


tions  on  a  single  server  or  cluster. 
Multiple  Web  servers,  for  instance,  could 
run  on  the  same  machine  or  cluster, 
saving  server  space  and  optimizing 
resources. 

Schneider  National,  a  truckload 
motor  carrier  in  Green  Bay, Wise.,  chose 
Solaris  Resource  Manager  for  a  couple 
reasons. 

“The  first  was  for  server  consolida¬ 
tion,”  says  Todd  Horkman,  manager  of 
operating  systems  at  Schneider. 

“One  of  our  main  challenges  with 
consolidating  and  running  multiple,  dif¬ 
ferent  applications  on  a  single  Unix 
operating  system  is  controlling  and 
guaranteeing  resources  to  applications 
so  that  no  single  application  takes  over 
the  entire  system,”  he  says. 

The  software  also  lets  Schneider  con¬ 
trol  multiple  instances  of  the  same 
application  on  a  single  server,  he  says. 

Although  Solaris  Resource  Manager 
1.1  has  a  command  line  interface, 
Horkman  says  systems  administrators  at 
Schneider  found  it  easy  to  use.  Sun  is 
working  on  a  graphical  interface  but 


declined  to  specify  when  it  will  be 
released. 

The  Sun  clustering  software  that 
Solaris  Resource  Manager  works  with 
helps  ensure  that  the  applications 
users  require  are  always  available.  It 
is  a  Java-based  management  utility 
that  allows  servers  to  be  clustered 
up  to  10  kilometers  apart  across 
Ethernet,  Fast  Ethernet,  Gigabit 
Ethernet,  ATM  or  token-ring  networks. 
The  clustering  software  runs  on  Sun 
Enterprise,  Netra  and  StorEdge  server 
and  storage  products. 

Solaris  Resource  Manager  1.1  soft¬ 
ware  will  be  available  later  this 
quarter  starting  at  $4,000  per  server. 
Pricing  for  Sun  Cluster  2.2  starts  at 
$2,000  per  node. 

Sun:  www.sun.com/solaris/ds/ds- 

resourcemgr 


More 


Online 


*  A  technical  overview 
of  Sun  Cluster  2.2. 

*  A  look  at  Compaq's 
64-bit  TruCluster  server. 

www.nwfusion.com 
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Infrastructure 


I  N  -  S  I  T  E :  Lessons  from  Leading  Users 

Barnes  &  Nobles  new  net  provides  plenty  of  room  to  grow 


BY  JEFF  CARUSO 

oes  Barnes  &  Noble  really  need 
the  bandwidth  of  a  Gigabit  Ether¬ 
net  network  to  run  its  business? 
Maybe  not  right  now,  but  the  fast¬ 
growing  bookseller  wants  to  be 
ready  in  the  event  that  network 
traffic  continues  to  explode  over  the 
next  few  years. 

The  company  learned  its  lesson 
the  last  time  it  built  a  network  for  its 
headquarters.  It  took  just  18  months 
for  traffic  generated  by  inventory,  pur¬ 
chasing  and  other  applications  to  sat¬ 
urate  a  building  network  running  on 
four  Cisco  Catalyst  5000  switches.  So 
when  Barnes  &  Noble  consolidated 
several  offices  into  a  headquarters 
building  in  Manhattan,  the  company 
started  fresh  by  installing  a  Gigabit 
Ethernet  backbone  anchored  by 
Layer  3  switches. 

Switches  easily  won  out  over  tradi¬ 
tional  routers  because  switches  tend 
to  be  a  lot  less  expensive  and  because 
the  company  didn’t  need  the  exten¬ 
sive  protocol  support  of  most  routers, 
says  Kevin  Money,  LAN  supervisor  at 
Barnes  &  Noble. Though  the  network 
carries  IPX  traffic  to  Novell  NetWare 
serv  ers,  the  company  is  moving  to  an 
IP-based  Windows  NT  environment. 

Barnes  &  Noble  also  passed  on 
ATM,  given  that  all  the  company’s  end- 
stations  were  already  Ethernet  or  Fast 
Ethernet  and  because  the  company 
considers  ATM  products  more  difficult 
to  configure. 

After  considering  gear  from  Cisco, 
3Com  and  Nortel  Networks,  Money 
wound  up  choosing  Extreme  Net¬ 
works  switches  for  their  low  cost  and 
high  capacity.  He  figures  the  Extreme 
network,  which  cost  about  $400,000, 
was  about  40%  less  expensive  than  a 
similar  Catalyst  5500  network  would 
have  been.  As  for  switch  port  density', 
Money  says  Extreme’s  was  the  highest 
he  could  find  without  going  to  a  chas¬ 
sis  model,  which  takes  up  more  space 


than  a  fixed-port  box. 

“Space  in  New  York  is  always  limit¬ 
ed,”  Money  says.  The  Extreme  Sum- 
mit48  switch  has  48  10/100M  bit/sec 
Ethernet  ports,  so  the  network  can 
support  a  lot  of  users  from  a  cramped 
wiring  closet,  he  points  out. 


The  wiring  closets  on  each  of  the 
headquarters’  eight  floors  have  three 
or  four  Summit48  switches  in  them, 
which  is  more  than  enough  to  sup¬ 
port  the  600  users  in  the  building.The 
switches  connect  to  two  Black- 
Diamond  chassis-based  Layer  3  switch¬ 
es  in  the  data  center.  The  Black- 
Diamonds,  which  can  be  outfitted 
with  up  to  48  Gigabit  Ethernet  con¬ 
nections  each,  back  each  other  up. 

Barnes  &  Noble  renovated  one 
floor  every  two  weeks  starting  in 
February,  and  installed  the  Extreme 


gear  as  part  of  the  renovations. 

Barnes  &  Noble  was  a  bit  con¬ 
cerned  about  going  with  such  a  small 
vendor,  thinking  that  the  service  and 
support  might  not  be  up  to  the  level 
of  some  of  Extreme’s  competitors.  But 
Barnes  &  Noble  talked  to  other  Ex¬ 


treme  customers  as  references  before 
buying,  and  Money  says  he  is  pleased 
with  Extreme’s  technical  staff. 

Along  the  way,  Barnes  &  Noble 
encountered  some  software  prob¬ 
lems  centered  on  the  Extreme 
Standby  Router  Protocol,  which  is 
the  vendor’s  method  of  rerouting 
traffic  in  the  event  of  a  failure. 
Money  says  he  was  impressed  when 
Extreme  flew  engineers  from  Cali¬ 
fornia  to  the  New  York  headquarters 
to  track  down  the  problem  and 
develop  a  workaround. 


Looking  ahead 

What  did  Barnes  &  Noble  get  out 
of  all  this?  Enough  room  to  grow. 
Money  says.  And  while  he  hasn’t 
tested  the  difference  in  application 
performance  with  the  new  network, 
some  users  swear  certain  applica¬ 
tions  are  moving  twice  as 
fast  as  before. 

The  company  is  already 
examining  ways  to  expand 
the  capabilities  of  the 
switches.  Money  says  he  is 
looking  into  Extreme’s 
offer  to  upgrade  his  Layer 
2  Summit48  switches  to 
Layer  3  for  free. 

While  having  Layer  3 
switches  throughout  the 
network  would  be  unlikely 
to  show  any  immediate 
benefits,  the  technology 
could  make  it  easier  when 
the  company  starts  video- 
conferencing  and  multicas¬ 
ting,  Money  says.  With  the 
routing  function  close  to 
the  users,  video  calls 
wouldn’t  have  to  traverse 
the  network  backbone  if 
the  calls  were  between 
users  on  the  same  floor.  On 
the  other  hand,  it’s  unclear 
whether  putting  the  rout¬ 
ing  function  everywhere 
might  be  more  of  a  management  has¬ 
sle  than  it  is  worth. 

Another  technology  that  Barnes  & 
Noble  is  looking  at  is  Gigabit  Ether¬ 
net  over  Category  5  copper  wiring, 
to  be  used  as  a  backup  to  the  fiber¬ 
optic  lines  in  place  now.  “The  weakest 
link  in  any  network  is  the  cabling,” 
Money  says. 

Meanwhile,  some  of  the  Cisco  gear 
is  still  in  place.  In  particular,  the  com¬ 
pany  has  two  Cisco  routers  connected 
to  the  BlackDiamond  switches  for 
links  to  the  WAN.  3 


Blazing  bookstore  network 


Barnes  &  Noble's  new  network  is  handling  some  applications  twice  as  fast  as  before,  thanks 
to  a  combination  of  Extreme  Layer  2  and  3  switches  linked  via  a  Gigabit  Ethernet  backbone. 


O  End  users  access  the  corporate 
network  through  Summit48 
Layer  2  switches  outfitted  with 
10/100M  bit/sec  desktop  and 
server  connections  and 
dual-Gigabit  Ethernet  uplinks. 


Summit48  switches 


Building  floors 
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Data  center 


Extreme  BlackDiamond 
Layer  3  switches 


©Extreme  BlackDiamond  switches 
anchor  the  backbone  network, 
moving  traffic  between  floors  at 
Gigabit  Ethernet  speed. 
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Cisco  routers 


WAN 


©  Barnes  &  Noble  has  ditched 
most  of  its  Cisco  gear,  but  the 
company  does  use  two  Cisco 
routers  to  access  the  WAN. 


3Com, 

continued  from  page  17 

book  user  can  easily  switch  net¬ 
work  settings  when  connecting 
from  corporate  headquarters  or 
a  branch  office. 

Early  customers  give  the  new 
Megahertz  NIC  good  reviews. 
Jas  Batras,  vice  president  of  new 
technologies  at  MJP  Computers 
in  Oxnard,  Calif.,  says  his  com¬ 
pany  was  able  to  hook  a  mobile 
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computer  outfitted  with  the 
NIC  to  a  Windows  NT  network 
on  the  first  try. 

“In  Windows  NT,  it’s  usually 
tough  to  get  the  network  up  in 
one  shot,  but  it  was  up  right 
away,”  he  says. 

Batras  says  the  only  problem 
he  encountered  was  a  network 
disconnection  due  to  excessive 
heat  from  the  computer  con¬ 
taining  the  NIC.  But  that  may 
have  been  a  problem  with  the 
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computer,  not  the  NIC,  he  says. 
Nonetheless,  he’s  waiting  for 
replacement  cards  from  3Com. 
“I’ll  see  what  happens  with 
those,”  he  says. 

3Com  has  also  upgraded  its 
EtherLink  10/100  PCI  NICs 
with  support  for  DynamicAc- 
cess  features  such  as  enhanced 
Remote  Wake  Up  and  integrat¬ 
ed  Managed  PC  Boot  Agent.The 
capabilities  allow  IT  managers 
to  remotely  manage  desktops 


and  servers,  which  3Com 
claims  reduces  the  time  and 
cost  of  system  troubleshooting 
and  maintenance. 

In  addition,  the  NICs  now 
include  an  alert  feature  that  pro¬ 
vides  for  continual  network 
monitoring  by  sending  a  “heart¬ 
beat”  signal  to  the  remote  man¬ 
agement  station.  In  the  event  of 
power  failure  or  theft,  the  heart¬ 
beat  transmission  stops,  trigger¬ 
ing  a  time-stamped  alert  that 


helps  IT  managers  diagnose  sys¬ 
tem  failures  and  maintain  the 
security  of  company  hardware. 

The  new  Megahertz  NIC 
costs  $189.  The  EtherLink  10/ 
100  PCI  NIC  with  the  new  soft¬ 
ware  costs  $103  for  desktops. 
Both  products  are  available 
now.  A  server  version  of  the 
EtherLink  NIC  with  new  soft¬ 
ware  is  scheduled  to  ship  in 
the  fall;  pricing  was  not  dis¬ 
closed.  B 
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The  Intel®  LANDesk®  product 
family.  Helping  you  take  control 
of  mixed  environments. 


Your  networked  PCs  and  servers 
are  quite  a  diverse  composition.  Take 
control  with  Intel® 
LANDesk®  products, 
which  offer  single¬ 
point  management  of 
mixed  environments, 
including  Windows* 
and  NetWare.*  First, 


there’s  LANDesk®  Client  Manager.  This 
essential  package  inventories  PC 
components,  monitors  PC  health  and 
provides  alert  notification.  Then  there  are 
LANDesk®  Server  Manager  products, 
maximizing  critical  server  uptime  through 
proactive  and  emergency  management 
tools.  LANDesk®  Management  Suite 
brings  it  all  together.  Problem  resolution 


teamed  with  asset  and  configuration 
management  makes  this  suite  indis¬ 
pensable.  Combine  these  solutions 
seamlessly  and  your  network  is  sure  to 
give  a  crowd-pleasing  performance. 
For  details,  and  to  find  an  Intel  reseller 
near  you,  visit  us  on  the  Web. 

►  intel.com/network/mixed/ 


©  1999  Intel  Corporation.  All  rights  reserved.  Intel  and  LANDesk  are  registered  trademarks  of  Intel  Corporation.  *AII  other  trademarks  are  the  property  of  their  respective  owners. 


16  or  24  ports  IOBase>T  ports 
I  fixed  I0/I00TX  uplink 
I  optional  I0/I00TX  or  I00FX  uplink 
Half/full-duplex  operation  on  all  ports 
Support  for  up  to  2,000  MAC  addresses 
IEEE  802. IQ  VLAN  support 

rPort  mirroring 

Spanning  Tree  redundancy 
SNMP  or  web-based  management 


Allied  Telesyn’s 
AT-3700XL 
Switches  Are 
Fully  Compatible 
with  PublicPort 
Systems 


802. IQ  Ethernet  Switches 

:r  Value  Leader 


The  AT-3700XL  series  of  managed 
switches  from  Allied  Telesyn 

Allied  Telesyn’s  AT-3700XL  series  of  man¬ 
aged  Ethernet  switches  combine  rich 
functionality  with  a  remarkably  low  pur¬ 
chase  price  to  deliver  outstanding  value  to 
departmental  or  workgroup  environments 
where  reliability,  interoperability  and  ven¬ 
dor  support  mean  more  than  just  brand. 
Mind  you,  as  one  of  the  first  vendors  to 
ship  a  fully-compliant  IEEE  802.  IQ 
Ethernet  switch,  we  can  rightfully  claim 
technology  leadership  too. 

And  with  web-based  management  helping 
with  network  control,  security  and 
performance,  AT-3700XL  series 
switches  provide  all  the  impor¬ 
tant  features  you  need  from  a 
user-friendly  workgroup  switch. 
But  because  they  are  priced 
some  10-20%  below  comparable 
devices  from  the  brand  leaders 
and  come  with  great  warranties 
and  free  technical  support,  AT-3700XL 
series  switches  represent  significantly 
better  value. 

Give  Allied  Telesyn  or  your  reseller  a  call 
today  for  the  latest  news  on  AT-3700XL 
series  of  switches. 

Fully  compliant  802. IQ  Ethernet  switches 
from  Allied  Telesyn.  Now  you  know. 

Allied  Telesyn 

Simply  Connecting  the  World 
Tel:  1.800.424.4284  www.alliedtelesyn.com 

Copyright  l  Allied  Telesyn  International  Corp. 

•  For  more  information,  go  to  www.alliedtelesyn.com/news/prpubprt.htm.  PublicPort  is  a  trademark  of  PublicPort,  Inc. 

'  '  As  sold  by  Global  Computer  Supplies,  as  of  May  25,  1999.  www.globakomputer.com 
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Alta  scales  up  Linux 
with  clustered  servers 


Server  clusters  can  house  more  than  1, 000  Pentium  Ills. 


BY  DENI  CONNOR 

SANDY,  UTAH  —  Linux  naysayers 
claim  the  open  source  operating  sys¬ 
tem  isn’t  suitable  for  handling  high- 
end  applications. 

But  don’t  tell  that  to  Alta 
Technology,  which  has  just  intro¬ 
duced  scalable  Linux  servers  that  can 
be  configured  in  clusters  containing 
more  than  1,000  processors. 

The  company’s  new  AltaCluster 
offering,  designed  to  handle  transac¬ 
tion-  and  compute-intensive  applica¬ 
tions,  runs  Red  Hat  Software’s  Linux 
as  well  as  Extreme  Linux  variants 
from  the  Beowulf  Project.  Beowulf  is  a 
research  project  focused  on  Linux 
clusters. 

AltaClusters  can  scale  up  to  1,024 
550-MHz  Pentium  III  processors. 

How  to  build  a  cluster 

The  clusters  are  made  up  of  server 
chassis,  each  of  which  can  hold  one 
to  16  processors.  Processors  can 
be  added  in  one-  or  two-processor 
nodes. 

Customers  can  use  Ethernet,  Fast 
Ethernet,  Gigabit  Ethernet  or  Myrinet, 
a  proprietary  network  technology 
from  Myricom,  to  link  processors  and 
connect  chassis  to  one  another. 
Myrinet  is  popular  in  the  research 
community. 

AltaClusters  have  up  to  1G  byte  of 
RAM  per  two-processor  compute 
node  and  ship  with  one  6.4G-byte 
hard  drive  per  chassis. 

The  servers  are  also  available  with 
Alpha  or  Pentium  II  processors.  Alpha 
processors  are  best-used  for  rendering 
graphics  or  video  applications; 
Pentiums  are  best-suited  for  database 
applications  and  other  compute¬ 
intensive  programs. 

AltaClusters  compete  with  parallel 
computers  from  Compaq,  Paralogic 
and  other  companies. 

Traditionally,  Alta  has  targeted 
research,  education  and  government 
customers,  but  the  company  will  try 
to  broaden  its  reach  into  the  commer¬ 
cial  sector  with  its  new  Pentium  III 
server  clusters. 

ACE  in  the  hole 

AltaClusters  have  a  unique  man¬ 
agement  feature  called  the  Alta¬ 
Cluster  Environment  (ACE),  which 
increases  system  reliability  and  mini¬ 
mizes  downtime.  Using  ACE,  each 


node  is  powered  on  sequentially  to 
avoid  failures. 

With  ACE,  network  managers  can 
also  power  off  individual  nodes  with¬ 
out  affecting  the  cluster,  monitor  the 
temperature  of  processors,  reset 
nodes  remotely  and  use  disk  cloning. 


AltaCluster  highlights 

•  Runs  Red  Hat  Linux  with  Beowulf 
extensions. 


•  Scales  clusters  to  more  than  1 ,000 
processors. 


•  Supports  Pentium  II,  III  and  Alpha 
processors. 


•  Boasts  up  to  1G  byte  of  RAM  per  every 
two  processors. 


•  Features  advanced  power  management, 
remote  management  and  disk  cloning. 


Disk  cloning  automates  the  replica¬ 
tion  of  volumes,  directories  and  data 
to  other  nodes. 

“The  integrated  power-control  and 
power-sequencing  characteristics 
were  important  to  us  and  not  some¬ 
thing  we  could  easily  complete  with 
off-the-shelf  boxes  and  Linux,”  says 
Tony  Bartolini,  staff  engineer  at  Etec, 
a  Hayward,  Calif.,  firm  that  makes 
products  for  the  semiconductor 
industry. 

Bartolini  initially  tested  Beowulf 
clustering  technology  with  pre¬ 
viously  discarded  PCs,  but  found  he 
could  not  add  power  features  or 
processor  speed  easily  and  in¬ 
expensively. 

Pricing  for  AltaClusters  starts  at 
$70,000  for  a  16-processor,  550-MHz 
Pentium  III  system  with  6.4G  bytes 
of  disk  space  and  1,024M  bytes  of 
RAM. 

Alta:  www.altatech.com 
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WE'VE  SHIPPED  TWICE  AS  MANY 


DIGITAL  COPIERS  AS  ANYONE  ELSE. 
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Source:  CAP  Ventures,  Inc..  International  Data  Corporation  and  Dataquest  for  1998  Black  and  White  Digital  Copier  Units  Placed 
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If  you  feel  that  your  Internet  service  is  leaving  you  adrift,  it's  time  to  talk 
w  ith  UUNET,®  an  MCI  WorldCom"111  Company.  From  high-speed  access  to 
Weh  hosting  to  remote  access,  we  offer  a  full  range  of  Internet  services  that  can 
help  your  business  do  more.  And  as  the  world's  premier  IP  network,  we're 
making  VPNs  and  Internet-based  faxing  not  just  a  promise,  but  a  reality.  Couple 
that  with  network  performance  that  sets  industry  standards  year  after  year  and 
you've  got  a  provider  that  won't  leave  you  stranded*  So  if  your  business  could 
use  a  partner  like  us,  call  1  888  886  3831  or  visit  us  at  www.info.uu.net. 
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An  MCI  WorldCom  Company 
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AN  ALTERNATE  WAY  TO  COMMUNICATE 
WHEN  YOUR  INTERNET  SERVICE  WON’T. 


r  H  E  I  W  O  R  L  D  '  S  INTERNET  C  O  M  M  U  N  I  C  A  T  I  O  N  S  COMPANY 


U.S.  +703  206  f)600  Canada:  1  888  242  0653  ©  1999  UUNET  Technologies,  Inc.,  a  subsidiary  of  MCI  WorldCom,  Inc.  All  rights  reserved.  The  UUNET  logo  is  a  trademark. 
*For  more. information;  www.uu.net/sla. 
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primarily  with  IBM's  Host-on-Demand 
offering  and  OpenConnect’s  Web- 
Connect  Pro  product.  Attachmate  has 
tried  to  separate  itself  by  offering  flex¬ 
ible  client  technology. 

Pricing  for  E-Vantage  Host  Access 
Server  2.2  starts  at  $214  per  server.  S 


Attachmate  speeds  up  Web-to-host  package 


BY  MARC  SONGINI 

BELLEVUE,  WASH.  —  Attachmate 
has  rolled  out  a  new  edition  of  its  Web- 


with  Windows  NT  4.0,  95  and  98 
clients.  Corley  says  the  network  he 
oversees  runs  tn3270  sessions  directly 


through  a  Cisco  router  attached  to  a 
mainframe. 

Attachmate’s  E-Vantage  competes 
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can  focus  on  more 


Office  products  may  not  seem  thrilling  to  you. 

But  what  if  we  told  you  that  BT  Office  Products  is 
using  e-commerce  to  generate  hundreds  of  thousands 
of  dollars  in  sales  ever}'  day? 

That's  a  whole  lot  of  paper  clips 

And  that’s  why  Mike  Miller  relies  on  NetSolve  for  remote 
network  management  and  Internet  security  services. 
When  you’re  busy  building  a  business,  you  don’t  want 
your  staff  worrying  about  your  network.  NetSolve  can 
take  care  of  day-to-day  monitoring  and  management 
for  WANs,  LANs,  and  security,  freeing  you  up  for 
business-critical  tasks  -  like  creating  a  new  way  to  sell 
paper  clips.  Best  of  all,  we  guarantee  your  satisfaction. 
Now  who’s  excited? 

Ready  to  get  focused? 

Call  1-800-NETSOLVE  or  visit  www.netsolve.com  today. 
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to-host  software  that  promises  faster 
access  to  a  wider  variety  of  host 
resources. 

E-Vantage  Host  Access  Server  2.2, 
like  previous  versions,  sits  on  a 
Web  server  and  manages  the  distri¬ 
bution  of  ActiveX  and  Java  software 
needed  by  clients  to  access  host 
resources. 

The  new  edition  adds  support  for 
Unix  servers,  including  those  running 
Solaris,  HP-UX  and  Linux.  Previously, 
E-Vantage  only  ran  on  NT  boxes. 

The  company  also  has  upgraded  the 
E-Vantage  Java  client  so  it  can  handle 


Improved  host  access 

Attachmate's  E-Vantage  Host  Access 
Server  22  includes  these  new  features: 

•  Support  for  Unix  management  consoles. 

•  Secure  Sockets  Layer  security. 

•  Support  for  multiple  hosts. 

•  Cacheable  Java  clients. 


tn5250  andVT  420  emulation  sessions. 
The  client  could  already  handle  tn3270 
sessions.  The  client  also  now  has 
Secure  Sockets  Layer  encryption. 

To  speed  client  access,  Attachmate 
has  added  the  ability  to  cache  the  Java 
client  on  the  desktop.  For  subsequent 
logons,  the  client  checks  in  with  the 
management  server  to  ensure  the  desk¬ 
top  has  the  latest  client  configuration. 
If  the  latest  configuration  is  already  on 
the  desktop,  the  end  user  is  ready  to 
access  host  applications  and  doesn’t 
need  to  download  the  client  applica¬ 
tion  again.  For  infrequent  or  unknown 
end  users,  the  system  administrator  can 
configure  the  software  without  the 
caching  option. 

Also,  users  can  now  establish  ses¬ 
sions  with  multiple  heterogeneous 
hosts.  One  client  license  can  support 
sessions  with  a  variety  of  platforms, 
including  S/390,  AS/400  and  VAX 
machines. 

The  updated  Attachmate  software 
lets  clients  access  hosts  directly,  after 
checking  in  with  an  intermediary 
Web  server  once  the  Java  client  is 
downloaded. 

Direct  client-to-host  access  is  a  big 
plus  because  it  reduces  the  points  of 
failure  in  a  network,  says  Maj.Tim 
Corley,  an  IT  administrator  with  the 
U.S.  Marine  Corps.  His  network,  based 
in  Quantico,  Va.,  makes  personnel  files 
on  a  mainframe  accessible  to  users 
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that  holds  metadata  —  not  actual 
objects,  but  descriptions  of  objects  and 
their  locations  in  other  physical  direc¬ 
tories.  Unfortunately,  vendors  such  as 
Zoomit  took  the  term  “metadirectory” 
and  redefined  it  so  it  could  be  used  to 
describe  what  I’d  call  an  iiberdirectory 
—  a  directory  that  gathers  and  holds  all 
the  data  from  all  your  other  directories. 

The  problem  with  iiberdirectories  is 
they  must  become  the  authoritative 
source  of  all  directory  changes  through¬ 
out  the  myriad  directories  within  your 
organization  in  order  to  maintain  syn¬ 
chronization.  This  presents  a  political 
problem  —  IS  wants  to  control  the  net¬ 
work  directory,  human  resources  wants 
to  control  the  personnel  directory  and 
every  other  department  wants  sole 
control  of  its  directory. 

Real  metadirectories  (which  we’ll 
call  “virtual  directories”  to  differentiate 
them  from  iiberdirectories)  consist,  for 
the  most  part,  of  database  views  of 
directory  objects  throughout  the  enter¬ 
prise.  Each  department  can  continue  to 
maintain  its  own  directory  and  choose 
to  expose  to  the  virtual  directory  only 
the  information  it  wants  to  disseminate. 

Add  the  problems  of  size  and  the 
accompanying  use  of  bandwidth  for  syn¬ 
chronization,  and  it’s  easy  to  see  that  a 
virtual  directory  is  by  far  the  way  to  go. 

Novell  chose  to  add  virtual  directory 
features  to  NDS  while  (it  would  seem) 
Microsoft  wants  to  make  Active 
Directory  an  iiberdirectory.  It  may  be 
that  Microsoft’s  acquisition  of  Zoomit 
was  simply  to  acquire  the  expertise  to 
create  a  virtual  directory  within  Active 
Directory  —  at  least  I  hope  so. 

Both  companies  should  incorporate 
the  technologies  into  their  directory 
products  early  next  year,  and  a  lot  can 
happen  in  the  next  six  to  nine  months. 
But  from  this  perspective,  it  looks  like 
a  home  run  for  Novell  and  just  a  long 
fly  ball  for  Microsoft. 

Kearns,  a  former  network  adminis¬ 
trator,  is  a  freelance  writer  and  con¬ 
sultant  in  Austin,  Texas.  He  can  be 
reached  at  wired@vquill.com. 


Wired  Windows  .  Dave  Kearns 

T HE  PROBLEM  WITH  UBERDIRECTORIES 


It’s  been  a  very  busy  fortnight  on 
the  directory  services  front,  espe¬ 
cially  for  fans  of  metadirectories. 

Microsoft  started  die  ball  rolling  with 


the  announcement  of  its  acquisition  of 
Zoomit,  the  creator  of  Via,  a  prominent 
metadirectory.  Then  Novell  announced 
its  Connect4Commerce  technology, 


which  incorporates  an  XML  engine  to 
create  a  virtual  metadirectory  in  Novell 
Directory  Services  (NDS). 

In  my  world,  a  metadirectory  is  one 
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Microsoft  and  a  number 
of  vendors  with  close  ties 
to  Microsoft  and  Active 
Directory  (notable  exception:  Cisco)  were 
absent  when  Novell,  IBM  and  others 
formed  the  Directory  Interoperability 
Forum  earlier  this  month.  But  while  talk¬ 
ing  with  Entevo's  Dale  Gardner,  director 
of  product  marketing,  about  the  compa¬ 
ny's  new  Active  Directory  management 
products,  he  indicated  that  Entevo  would 
join  the  forum  soon.  Look  for  the  rest  of 
the  Active  Directory  backers  to  join,  too. 


There  are  many  good  reasons  to  migrate 
from  leased  lines  to  Frame  Relay,  but 
protecting  your  data  is  not  one  of  them. 
With  the  incidence  of  hacking,  data  theft, 
and  industrial  espionage  on  the  rise,  now 
more  than  ever,  your  business  needs  the 
DATACRYPTOR  2000. 

Racal's  DATACRYPTOR  2000  family  of  link 
and  frame  relay  encryptors  are  designed  to 
protect  your  valued  data  by  authenticating 
your  connections  and  encrypting  data  that 
flows  across  your  network. 

The  versatile  DATACRYPTOR  2000  protects 
your  business  using  X.509  certificates  to 
authenticate  each  connection  and  triple-DES 
to  encrypt  data.  Automatic  key  exchanges 
take  place  using  Diffie-Hellman  Public  Key 
negotiation  as  frequently  as  you  wish.  The 
DATACRYPTOR  2000  offers  soft-loadable, 
digitally  signed  algorithms  to  protect 
your  investment  today  and  for  the  future. 
From  a  single,  central  point  of  control, 
the  DATACRYPTOR  2000  can  be  installed, 
configured  and  managed  using  SNMP  and 
Racal's  secure  graphical  Element  Manager. 

When  it  comes  to  providing  your  valuable 
information  safe  and  secure  passage,  look 
to  Racal  to  be  your  safety  net. 

CALL  NOW  FOR  MORE  INFORMATION  ON 
FRAME  RELAY  VULNERABILITY  AND  RECEIVE 
YOUR  FREE  KEY  MANAGEMENT  WHITE  PAPER 
OR  VISIT  US  AT  WWW.RACALITSEC.COM 
1-888-744-4976  OR  1-954-846-4700  EXT.  4492 


RACAL'S  DATACRYPTOR™  2000 


NetShelter®  Bundle  Kit. 


Just  mail  or  fax  this  completed  coupon 
or  contact  APC  for  your  FREE  NetShelter 
Bundle  Kit .  Better  yet,  order  it  today  at 
the  APC  Web  site! 


Key  Code 

http://promo.apcc.com  m255z 

(888)  289-APCC  x7610  •  FAX:  (401 )  788-2797 


□  YES!  Please  send  me  my  FREE 
NetShelter  Bundle  Kit. 


□  NO.  I'm  not  interested  at  this  time  but 
please  add  me  to  your  mailing  list. 


APC  NetShelter®  and  APC  Smart-UPS®  Rack-mount 


Name  _ 


m255z 


Title: _ Company  _ 

Address: _ 

City/Town: _ State: _ __  Zip:  _ Country: 

Phone: _ 


Brand  of  UPS  used? 


.# 


Brand  of  PC  used?  _ # 

Brand  of  servers  used? _ # 
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APC 

AMERICAN  POWER  CONVERSION 

KEY  CODE:  m255z 
Department:  B 
132  FAIRGROUNDS  ROAD 
PO  BOX  278 

WEST  KINGSTON  Rl  02892-9920 


How  to  Contact  APC 

Call:  (888)  289-APCC 

use  the  extension  on  the  reverse  side 

Fax:(401)  788-2797 

Visit:  http://promo.apcc.com 

use  the  key  code  on  the  reverse  side 

APC 
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How  to  get  rack-mount  server 
protection  in  three  easy  steps 


When  you  install  your  new  IBM, 
Compaq,  HP  or  Dell  server 
demand  the  APC  Smart-UPS®  RM 
and  NetShelter®  Power  Protected 
Enclosure  bundle  be  part  of 
the  solution. 

According  to  Contingency  Planning 
Research,  power  failure  and  surges 
account  for  45%  of  all  data  loss.  In 
high  availability  environments, 
that's  unacceptable  risk. 

Why  not  give  yourself  a  break?  Bad 
power  should  be  the  last  thing  you 
have  to  worry  about. 

Wrap  your  new  server  up  in  the 
best  armor  money  can  buy:  APC 
Smart-UPS  power  protection  and  an 
APC  NetShelter  rack  enclosure. 

APC  is  the  only  company  today 
that  can  package  top  quality  power 
protection  pre-assembled  and  pre¬ 
configured  in  a  quality  rack  for 
20%  less  than  the  competition. 

Installing  power  protection  doesn't 
need  to  be  complex  and  expensive. 
Let  the  power  of  two  work  for  you. 
Call  your  local  reseller  and  ask  for 
your  Power  Protected  Enclosure 
Bundle  today! 
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1  All  enclosures  are  shipped  F.O.B.  APC  provides  FREE  inside 
delivery  at  no  extra  charge  with  recommended  carrier, 
United  Van  Lines. 


Simple 


•  Shipped  pre-assembled  with  UPS 

•  Free  inside  delivery* 

•  Saves  floor  space 

•  Eliminates  cabling  "rat's  nest" 

•Automatic  voltage  regulation  and  proactive 

environmental  monitoring 

•  FREE  PowerChute®  plus  software  makes  both 
local  and  remote  power  management  easy 


Smart-UPS  RM  1400  VA  plus 
NetShelter  42U  rack  AR1200 


Durable 


$2,995 


•  Physically  protects  your  server 

•  Bulletproofs  your  installations 

•  Limits  wear  and  tear  on  components 

•  Shields  your  network  cards  and  disks  with 
guaranteed  surge  suppression 

•  Strong  adjustable  framework 
•$25,000  equipment  protection  guarantee 

with  Smart-UPS  (see  policy  for  details) 


Smart-UPS  RM  2200  VA  plus 
NetShelter  42U  rack  AR1205 


$3,550 


Flexible 

•  Organizes  your  equipment 

•  Ample  room  for  server,  UPS  and  accessories 

•  An  easy  fit  for  all  leading  server  manufacturers 

•  Robust  diagnostics  solves  problems  before 
they  happen 


Smart-UPS  RM  3000  VA  plus 
NetShelter  42U  rack  AR1210 


$3,749 
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FREE  NetShelter  Bundle  Kit!  Visit  today  and  learn  howto  get  the  protection  you  need. 
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“I  mean,  I'm  a  CNE.  Leaving  NetWare  was  a  nervous  experience 
for  me.  But  now,  every  server  we  have  is  running  on  Windows  NT. 
And  it’s  exceeded  my  expectations,  especially  with  file  and 
print,  which  is  critical  to  us  as  a  law  firm.  Our  print  server  is 
handling  30  million  pages  a  year,  and  we  never  have  to  touch  it. 
So  I’d  say  it’s  been  wildly  successful.” 

Eric  Schmidt,  Director  of  Infor  on  Services,  Brisker  &  Eckler  LLP 
on  switching  to  Microsoft  Windows  NT  Server  4.0  from  Novell  NetWare 


©  1999  Microsoft  Corporation.  All  rights  reserved.  Microsoft,  Where  do  you  want  to  go  today'5  and  Windows  NT  are  either  registered  trademarks  or  trademarks  of  Microsot 
Corporation  in  the  United  States  and/or  other  countries.  Other  product  and  company  names  mentioned  herein  may  oe  the  trademarks  of  then  respective  owners. 
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We  know  a  service  provider 
that  delivers  global  financial  news 
to  16,000  places  every  minute. 

In  the  New  World, 
information  never  sleeps. 


(□Cisco 

Powered  Network.. 


The  sun  never  sets  on  the  global  marketplace.  Especially 
for  a  major  business  news  wire  that  reports  the  latest 
breaking  financial  news  to  business  leaders  in  24  countries. 

So  it’s  no  accident  that  it  relies  on  a  Cisco  Powered  Network™ 
service  provider. 

Welcome  to  the  New  World  -  where  Cisco  Powered 
Network  service  providers  are  changing  the  way  people  share 
ideas  and  information  in  extraordinary  ways.  Impressive,  but 
not  surprising  when  you  consider  that  virtually  all  Internet 
traffic  in  the  world  travels  across  the  systems  of  one  company. 
Cisco  Systems.  We  can  help  you  achieve  the  same  exceptional 
results  for  your  business.  Look  for  the  Cisco  Powered  Network 
mark  or  visit  us  at  www.cisco.com/cpn. 

We’ll  match  you  with  a  Cisco  Powered  Network  service 
provider  who  can  reliably  extend 
your  network  over  a  Cisco-based 
infrastructure.  And  beyond. 


Cisco  Systems 


Empowering  the 
Internet  Generation" 


Briefs 


Wireless  local  loop  provider 
Advanced  Radio  Telecom  has 
signed  an  agreement  with 
CarrAmerica  Realty  giving  ART 
access  to  CarrAmerica's  254 
office  buildings.  Carriers  such  as 
ART,  which  bypass  telco  local 
loops  to  provide  broadband 
Internet  access,  generally  need 
such  agreements  to  place  anten¬ 
nas  and  other  equipment  at  user 
locations.  CarrAmerica  holds 
properties  in  Atlanta;  Austin, 
Texas;  Chicago;  Dallas;  Denver; 
Los  Angeles;  Miami;  Phoenix; 
Portland,  Ore.;  Salt  Lake  City;  San 
Diego;  San  Francisco;  Seattle  and 
Washington,  D.C.  ART  is  partially 
owned  by  Qwest  and  a  syndicate 
of  venture  capitalists;  the  rest  of 
its  stock  is  traded  on  Nasdaq. 

ART:  www.art-net.net. 

UUNET,  MCI  WorldCom's  ISP 
division,  announced  last  week 
that  its  digital  subscriber  line 
(DSL)  deployment  is  ahead  of 
schedule.  UUlink,  the  ISP's  DSL 
Internet  access  service,  is  now 
available  in  850  cities  across  the 
U.S.  UUNET  has  equipped  more 
than  1,000  of  its  points  of  pres¬ 
ence  (POP),  which  was  the  goal 
for  the  end  of  1999.  UUNET  now 
expects  that  more  than  1,500  of 
its  POPs  will  be  able  to  support 
DSL  services  by  year-end. 

UUNET:  www.uu.net 

Teledesic,  the  satellite-based 
broadband  Internet  access  ser¬ 
vice  backed  by  Bill  Gates  and 
Craig  McCaw,  recently  signed  a 
launch  contract  with  Lockheed 
Martin  and  a  systems  agreement 
with  Motorola  to  build  the  com¬ 
munications  network.  Lockheed 
Martin  will  use  Proton  M  and 
Atlas  V  launch  vehicles  to  propel 
an  unspecified  number  of  Tele- 
desic's  planned  288  satellites. 
Motorola  will  handle  the  engi¬ 
neering  and  construction  of  the 
Teledesic  Network,  which  is 
expected  to  debut  in  2003. 
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Rivals  slam  SBC/Ameritech  proposals 


Fine  print  of  deal  with  FCC  staff  reveals  long  path  to  any  penalties  against  combined  RBOC. 


BY  DAVID  ROHDE 

WASHINGTON,  D  C.  —  New  local  car¬ 
riers  say  they’ve  found  a  giant  devil  in 
the  details  in  a  proposed  set  of  condi¬ 
tions  for  the  pending  merger  of  SBC  and 
Ameritech. 

Rivals  of  the  two  Bell  giants  today 
are  expected  to  protest  to  the  Federal 
Communications  Commission  that  the 
merger  conditions  —  announced  three 


Reading  the  fine  print 

SBC  and  Ameritech  will  provide  local 
competitors  with  25%  discounts  on 
local  loops,  but  are  only  covering  a 
fraction  of  the  population  in  their  13 
combined  states.  The  following  is  a 
sampling  of  how  many  local  loops 
some  states  will  be  offered,  compared 
to  population: 


State  Local  loops  offered  Population 


Arkansas 

30,000 

2.5  million 

California 

479,000 

32.6  million 

Illinois 

180,000 

12  million 

Indiana 

62,000 

5.8  million 

Nevada 

10,000 

1.7  million 

Texas 

275,000 

19.7  million 

Conditions: 

1.  Promotional  offer  available  only  for  residential 
lines. 

2.  Promotional  offer  available  for  regular  analog 
lines  and  ISDN,  but  not  DSL  or  frame  relay. 

3.  Caps  include  total  number  of  local  loops 
provided  under  the  promotion,  even  if  some 
of  the  end  users  subsequently  terminate 
service  before  the  promotion  ends. 


weeks  ago  —  are  riddled  with  loop¬ 
holes  and  are  unlikely  to  give  users 
many  new  local  service  options. 

On  June  29,  the  FCC’s  staff 
announced  that  SBC  had  agreed  to  pay 
heavy  fines  if  it  does  not  enter  30  new 
out-of-region  markets  as  a  competitive 
local  exchange  carrier  (CLEC)  after  it 
buys  Ameritech.  But  it  wasn’t  until  two 
days  later  —  July  1  —  that  SBC  actually 
filed  the  text  of  the  merger  conditions 
at  the  FCC. 

The  1 1 8-page  text  reveals  that  SBC  is 
considered  to  have  entered  a  new  mar¬ 
ket  as  soon  as  it  has  installed  equip¬ 
ment  in  one  central  office  and  has  sold 


service  to  one  customer. 

Angry  SBC  rivals,  including  long¬ 
distance  carriers  and  independent 
CLECs,  say  that  the  way  the  merger 
conditions  are  written,  they  doubt  any 
of  the  potential  fines  —  for  out-of¬ 
region  entry  and  numerous  other 
issues  —  are  enforceable. 

“It’s  clear  that  [the  merger  condi¬ 
tions  text]  was  written  by  SBC,  and  it’s 
clear  that  it  was  written  in  such  a  way 
for  SBC  to  avoid  a  lot  of  its  obligations,” 
charges  Emily  Williams,  a  senior  attor¬ 
ney  with  the  Association  for  Local 
Telecommunications  Services  (ALTS),  a 
CLEC  trade  group. 

The  FCC  is  expected  to  get  an  ear¬ 
ful  of  these  complaints  today  when 
written  comments  are  due  at  the 
commission. 

For  example,  critics  are  pointing  to 
provisions  requiring  SBC  to  set  up  a 
uniform  system  for  competitors  to 
place  customer-change  orders  electron¬ 
ically  throughout  its  13-state  region. 
SBC  and  the  FCC  had  announced  that 
the  RBOC  will  owe  fines  if  it  fails  to  put 
in  place  such  a  uniform  platform  for 
what  carriers  call  an  operations  sup¬ 
port  system  (OSS). 

But  under  the  text  of  the  merger 
conditions,  SBC  first  gets  six  months  to 
draft  a  plan  for  a  uniform  OSS.  Then  it 
gets  one  month  to  review  the  plan 
with  a  group  of  CLECs.  Finally,  it  gets 
another  two  years  to  implement  and 
test  the  uniform  OSS. 

To  avoid  fines,  SBC  need  only  file  a 
statement  of  compliance  with  the  FCC. 
If  rivals  want  to  contest  SBC’s  claims, 
they  must  agree  to  arbitration.  And 
according  to  the  merger  conditions, 
the  arbitration  will  be  conducted  “in 
consultation  with  subject  matter 
experts  selected  from  a  list  of  three 
firms  selected  by  SBC/Ameritech.” 

Not  all  SBC  competitors  are  upset  by 
the  merger  conditions.  Northpoint,  a  dig¬ 
ital  subscriber  line  specialist,  praises  a 
commitment  by  SBC  to  create  a  sepa¬ 
rate  subsidiary  for  broadband  services, 
and  an  offer  to  temporarily  discount 
50%  of  the  wholesale  price  of  DSL 
loops  to  competitors. 

In  addition,  SBC  will  offer  25%  off 
the  regular  wholesale  rate  for  competi¬ 
tors  to  buy  non-DSL  loops.  But  that  pro¬ 
motion  is  limited  to  residential  lines 
and  only  lasts  until  SBC  has  wholesaled 


a  certain  number  of  loops  in  each  state 
(see  graphic,  left). 

Some  observers  fear  that  once  the 
merger  is  approved,  SBC  may  seek 
shortcuts.  For  example,  SBC  may  pur¬ 
chase  non-Bell  carriers  rather  than 
build  its  own  networks  out  of  its 
region. 

“There  is  nothing  that  would  stop  it 
from  just  gobbling  up  CLECs,”  says  one 
long-distance  industry  official. 

Even  at  that,  for  the  first  year  after 
the  merger  closes,  SBC  has  only  com¬ 
mitted  to  entering  local  markets  in 
Boston,  Miami  and  Seattle  —  with  a 
minimal  buildout. 

“It  looks  like  it’s  very  easy  for  the 
company  to  go  in  and  get  a  single  rack 
in  a  single  central  office  and  be  done 
with  it,”  says  ALTS  Vice  President 
Jonathan  Askin. 

Not  all  of  the  FCC’s  five  commission¬ 
ers  have  agreed  to  vote  for  the  merger 
with  the  negotiated  conditions. 

“The  parties  to  [the  merger]  should 
not  delude  themselves  into  thinking 
that  the  staff-negotiated  conditions  are 
the  final  ones,”  FCC  Commissioner 
Harold  Furchtgott-Roth  warned  in  a 
statement. 

But  analysts  note  that  SBC  is  making 
one  commitment  of  key  interest  to 
FCC  Chairman  William  Kennard  —  to 
roll  out  new  services  to  poorer  neigh¬ 
borhoods. 

“The  telecom  act  for  the  residential 
market  is  Code  Blue,”  says  Scott 
Cleland,  managing  director  of  the 
Legg  Mason  Precursor  Group  in  Wash¬ 
ington,  D.C. 

Under  the  merger  conditions, 
Kennard  finally  gets  a  commitment  for 
some  residential  telephony  competi¬ 
tion,  “and  SBC  gets  approval  of  its 
merger  and  controls  its  own  destiny,” 
Cleland  says.  C A 


More 


Online 


•  A  copy  of  SBC's  proposed  fill  mm 
merger  conditions. 

•  The  Association  for  Local 
Telecommunications  Services 
comments  on  the  plan. 

www.nwfusion.com 
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And  You 


With  NEUEENT5, 
You  Can  □□  Both. 


Introducing  software  that  can  emulate 
a  human  brain, 

It’s  true.  Neugents™  think  like  a 
human  —  only  faster. 

Neugents  compute  not  in  thou¬ 
sandths  of  a  second,  but  millionths. 
Without  emotion,  subjectivity,  or  bias. 

Neugents  can  analyze,  make 


Neugents  can  learn.  Using  a 
unique  self-learning  algorithm, 
Neugents  get  smarter  every  second, 
every  hour,  every  day. 

The  secret  is  Neural  Network 
Technology.  Computer  Associates  has 
taken  this  powerful  technology  and 
turned  it  into  a  patented  application 


before  your  next  product  fails  —  and 
why.  And  for  enterprise  management, 
Neugents  can  do  everything  from  warn 
you  before  a  server  goes  down  —  or . 
tell  you  when  and  where  your  next 
security  breach  will  occur. 

With  virtually  every  aspect  of  your 
business,  Neugents  can  accurately 


decisions,  take  action.  They  can  process  that  goes  far  beyond  traditional  fore- 

massive  amounts  of  chaotic  data  and  casting  methods  and  rules-based 

instantly  identify  complex  patterns  and  applications, 
relationships.  Figuring  out  why  things  Neugents  can  tell  you  what  your 
happen,  and  more  importantly,  predict  sales  are  going  to  be  next  week,  next 
what  will  happen  next.  month,  or  next  year,  They  can  tell  you 


and  consistently  predict  the  future. 

And  when  you  can  predict  the 
future,  you  can  not  only  change  the 
future,  you  can  change  the  world. 

Call  1-877-Neugents  for  more 
information. 


NEUEENT5 
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ASSOCIATES 


Software  superior  by  design 
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Wan  Monitor  .  Daniel  Briere  and  Christine  Heckart 

Pssst!  Could  I  borrow  an  Ethernet  port? 


only  a  single  user  in  mind.  Also,  many 
home  network  products  are  geared 
toward  permanently  linking  a  few 
machines,  not  dealing  with  visitor  access. 

Options  for  dealing  with  these 
issues  include: 

NetS witcher  (www.netswitcher. 
com).  This  program  establishes  a  profile 
for  each  office  —  home  or  otherwise  — 
that  can  be  loaded  when  the  user  wants 
to  access  the  network.  NetSwitcher 
saves  the  IP  address,  printer  settings  and 
other  key  configuration  data.  Input  the 
settings  once  and  load  them  each  time 
you  access  that  other  office. 

WebRamps  from  Ramp  Networks 
(www.rampnetworks.com).®pebBamps 
is  a  line  of  all-in-one  devices  providing  an 
Ethernet  hub  to  the  user  side  and  a 
modem-bonded  interface  to  the  net¬ 
work  side,  getting  up  to  168K  bit/sec 
(theoretically)  in  access  bandwidth.This 
is  generally  less  expensive  than  ISDN 
links  (except  in  places  like  California) 
and  a  great  alternative  to  digital  sub¬ 
scriber  lines  and  cable  modems  when 
these  are  not  available.  We’ve  been  play¬ 
ing  with  the  new  300FX  model,  which 
adds  the  ability  to  transform  outbound 
faxes  to  e-mail  attachments.  Someone 
visiting  a  WebRamp-outfitted  office  can 
plug  into  an  available  Ethernet  port  and 
have  access  privileges. 

Proxim  Symphony  Wireless  Access 
(www.proxim.com).  This  relatively 
low-cost  unit  offers  up  to  1.6M  bit/sec 
wireless  access  at  decent  distances.  Its 
biggest  asset  is  the  flexibility  to  work  at 
the  kitchen  table,  by  the  pool  or  wher¬ 
ever.  Also,  when  wireless  users  visit 
another  wireless  location,  they  can  easily 
log  on  to  that  net.  Proxim  has  the  capa¬ 
bility  to  switch  back  and  forth  between 
the  Symphony  PC  cards  and  your  hard¬ 
wire  Ethernet,  if  you  have  both. 

Network  Unplugged  (www.mobiliti. 
com).  We’re  just  testing  this  now,  but  it 
has  the  potential  to  be  a  great  program. 
Network  Unplugged  offers  many  Lotus 
Notes-like  functions  without  the  hassles 
of  a  Notes  implementation.The  program 
keeps  roaming  and  home-based  users 
synchronized  with  central  file  servers.  It 
allows  remote  workers  to  see  the  file 
server  as  it  appears  on  the  network  at  a 
main  office  and  maintains  an  image  of 
the  server  directories  even  offline. 
Because  we  deal  with  many  files  and 
share  them  among  ourselves,  it  is  easy 
for  files  to  stay  off  our  servers  for  some 
time.The  product  seems  simple  enough, 
but  the  net  impact  is  that  more  files  are 
being  placed  on  central  servers  for 
backup  and  version  control. 

Bottom  line:  We’ve  found  that  a  good 
wireless  two-line  phone  combined  with 
wireless  LAN  functionality  does  the  trick 
for  those  kitchen-table  board  meetings. 

Briere  is  president  and  Heckart  is 
vice  president  of  TeleChoice,  a  consul¬ 
tancy  in  Boston.  They  can  be  reached  at 
dbriere@telechoice.com  and  checkart @ 
telechoice.com. 


Home  offices  offer  unique  chal¬ 
lenges  and  no  cookie-cutter 
solutions  for  your  employees,  espe¬ 
cially  when  these  people  need  to  be 


connected  for  meetings. 

Here  at  TeleChoice,  some  home-based 
employees  sit  behind  cable  modems  and 
have  static  IP  addresses.  Some  use 


WebRamps  with  dynamically  allocated 
addresses,  while  others  are  on  dial-up 
connections.  The  biggest  problem  is 
most  home  offices  are  designed  with 
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Your  company  s  Microsoft 
Exchange  server  can  now  do 
double  duty  -  sending  and 
receiving  faxes  just  as  it  does 
email,  without  doubling  your 
deployment  and  ongoing  man¬ 
agement  costs.  It's  the  first 
truly  integrated  fax  solution  for 
Microsoft  Exchange.  And  it's 
brought  to  you  by  two  industry 
leaders:  NetMoves  (formerly 
FaxSav),  the  global  leader  in 
Internet  Fax,  and  Fenestrae. 
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Don  t  settle  fop 
partial  solutions 

Many  fax  server  companies 
would  have  you  believe  they 
offer  an  "Integrated  Fax 
Solution"  for  Microsoft 
Exchange,  when  all  they've 
done  is  connected  your  user 
community's  Outlook  client  to 
their  completely  unintegrated 
server.  It's  hardly  an  integrated 
solution  if  you've  got  to  manage 
an  entirely  separate  set  of  hard¬ 
ware,  software,  analog  telecom 
facilities  and  administrative  tools 
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Costs  less,  works  better 

Deploying  and  operating  one 
integrated  system  is  less  costly 
than  two.  And  when  you  consid¬ 
er  that  more  than  half  of  the 
cost  of  a  conventional  fax  server 
is  for  the  analog  telephone  equip¬ 
ment  and  facilities  that  our  fax 
solution  doesn't  require,  you'll 
find  that  our  solution  offers  the 
fastest  ROI  and  lowest  TCO  in 
the  industry  today. 


m  •  netmoves 

Documern  Delivery  at  Net  Spi 

Fenestrae 


Interliant  Solutions  @Work 


Unparalleled 

multi-platform  expertise 


When  a  major  manufacturer  needed  to  deploy  a  newly 
developed  Lotus  Domino -based  supply  chain  solution  to 
improve  communication  with  channel  partners  through¬ 
out  Europe,  the  Middle  East  and  Africa,  the  obstacles 
appeared  formidable.  Channel  partners  needed  immediate 
access  to  inventory  data  in  central  databases;  however,  the 
technology  and  resource  allocations  imperative  to  building 
and  maintaining  the  necessary  infrastructure  and  firewalls 
were  virtually  nonexistent.  And  even  if  the  company  could 
have  assembled  the  necessary  deployment  expertise,  it 
could  not  afford  the  investment  and  potential  lost  oppor¬ 
tunities  a  successful,  timely  implementation  would  require. 


Multiple,  state-of-the-art 
data  centers 


Unmatched  security 


24  x  7  global  access, 

monitoring  and  support 


Faster  implementation 
less  risk 


That’s  why  the  company  made  a  strategic  decision  to  out¬ 
source  to  Interliant,  the  world’s  leading  provider  of  hosting 
solutions.  Interliant  provided  speedy  deployment  on  a 
dedicated  Lotus  Domino  server,  plus  the  resources  and 
expertise  to  make  it  happen  in  days.  The  company  achieved 
the  instant  access  and  24  x  7  support  its  partners  needed,  as 
well  as  the  geographic  coverage  and  security  it  required. 


No  implementation  fees  — 
save  up  to  $5,000 

Plus,  one  month  of  hosting 
services  free 


So,  when  you  need  it  now,  relax.  When  you  need  it 
yesterday,  well,  we’re  working  on  that. 


Interliant 


www.interliant.com/now  or  1-800-763-9764 


©  1999  Interliant,  Inc.  Interliant  is  a  registered  trademark  and  the  Interliant  logo  and  Building  Global  Communities  are  trademarks  of  Interliant  Inc.  Lotus  is  a  registered  trademark 
and  Domino  is  a  trademark  of  Lotus  Development  Corporation.  "When  you  respond  by  July  30,  1999. 
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COMPANY 


DataConim 

TESTER'S 


Whenever  top-tier  ISPs  like  AOL®,  Yahoo!®  and  MindSpring®  cry  out  for  maximum  speed, 
we  heed  their  call.  When  enterprises  like  First  Union  National  Bank,  LTV  Steel  and 
Carnival®  Cruise  Lines  grasp  for  reliability,  we  leap  to  the  rescue.  And  when  organiza¬ 
tions  like  the  University  of  Southern  California  and  the  National  Institutes  of  Health 
search  the  world  for  price  and  performance,  we  arrive  just  in  time. 

(but  we  also  have  special  powers.) 

We're  Foundry  Networks.  And  we've  got  powers  no  one  else  can  match.  For  starters, 
we're  the  only  vendor  to  offer  super-fast  10/100  and  Gigabit  Ethernet  switches  for 
Layers  2,  3,  and  4-7 — all  totally  integrated.  Plus  Packet  Over  SONET  WAN  links.  That's 
product  breadth  from  the  network  edge  to  its  core. 

Then  there's  our  super  feature  set.  Integrated  multi-protocol  wire-speed  routing  and 
application-aware  Layer  4-7  switching.  Plus  64  port  Gigabit  Ethernet  density  at  up 
to  96  Mpps  for  maximum  investment  protection  and  flexibility. 


Yes,  we've  won  multiple  awards  for  product  and  corporate  excellence,  but  we're  not  in  this 
business  for  the  praise.  We're  in  it  to  give  our  customers  IronClad  Network  Performance. 
Does  that  make  us  superheroes?  We  don't  know.  But  our  customers  might. 


Visit  www.foundrynetworks.com/turboman  for  a  hot  deal  on 


B* 


our  hot  products.  Or  call,  1-888-TURBOLAN  (887-2652). 


FOUNDRY 

NETWORKS 


phone:  408.530.3300  visit:  www.foundrynetworks.com  email:  info@foundrynet.com 


Stackable  Switches  &  Switching  Routers 

Fastlron  Workgroup  &  Backbone  Switches 
Netlron  Switching  Router 
Turbolron/8  Switch  &  Switching  Router 


Serverlron  Server  Load  Balancing 
and  Transparent  Caching  Switch 


Fastlron  II  Wiring  Closet  Switch 


Biglron  4000  Switch  <&  Switching  Router 


Biglron  8000  Switch  8t  Switching  Router 
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Carriers  8  ISPs  Special  Focus 


Wireless  bargains  abound, 
but  which  is  right  for  you? 


BY  DENISE  PAPPALARDO 

Shopping  for  wireless  services  may  prove 
pleasantly  surprising  these  days,  given  the 
wealth  of  available  bargains  and  the  ease 
with  which  they  can  be  found. 

Growing  user  demand  for  better  and  less 
expensive  wireless  services  has  driven  com¬ 
panies  such  as  AT&T  Wireless,  GTE  Wireless, 
Omnipoint  and  Sprint  PCS  to  introduce  all-in-one 
calling  plans  in  recent  months.  By  combining  long¬ 
distance,  roaming,  caller  ID  and  voice  mail  features 
with  some  of  the  lowest  air  time  rates  ever,  wire¬ 
less  service  providers  have  hit  the  sweet  spot  of 
business  users. 

“We  cut  our  wireless  costs  in  half  after  switching 
to  Sprint  PCS  six  months  ago,”  says  Allan  Gardner, 
chief  financial  officer  at  Rebar  Specialists,  a  St.  Louis 
construction  company.  The  company  expects  to 
save  $18,000  annually. 

That  type  of  reported  savings  is  typical,  accord¬ 
ing  to  one  industry  expert. 

“In  the  past  12  months,  the  cost  of  wireless  ser¬ 
vices  has  dropped  up  to  50%, ”  says  Bob  Egan,  an 
analyst  at  Gartner  Group  in  Stamford,  Conn.  The 
savings  reflect  not  only  air  time  rates,  which  are 
down  30%  in  some  cases,  but  also  total  cost  of 
ownership,  he  says. 

Rebar  Specialists  is  using  Sprint  PCS’  Clear 
Wireless  Workplace  service  that  lets  business  users 
buy  a  bundle  of  minutes,  which  includes  roaming 
and  long-distance  on  Sprint  PCS’  network.  Rebar 
Specialists  is  also  using  a  Team  Option  from  Sprint, 
which  lets  the  company  bundle  in  another  set  of 
minutes  specifically  for  wireless  phone-to-wireless 
phone  calls. 

Pooling  is  a  big  draw 

After  trying  a  specialized  radio  service  from 
Nextel  that  didn’t  meet  the  company’s  needs,  Rebar 
Specialists  switched  to  Sprint  PCS,  in  part  because 
it  lets  the  company  pool  its  total  number  of  min¬ 
utes  for  all  its  users. 

“Being  able  to  pool  all  your  wireless  user  min¬ 
utes  is  a  huge  advantage  to  businesses  because 
trying  to  come  up  with  the  exact  bundled  plan 
for  individual  users  is  time-consuming  and  costly,” 
Egan  says.  Users  that  sign  up  for  too  few  minutes 
can  pay  double  their  standard  per-minute  charges 
when  they  exceed  their  monthly  allowances.  And 
users  who  sign  up  for  more  minutes  than  neces¬ 
sary  pay  higher  monthly  flat  rates. 

Pooling  takes  the  total  minutes  of  all  wireless 
users  and  puts  them  into  one  reserve.  For  example, 
if  a  company  has  20  users  on  1,500-minute  plans, 
70  users  on  600-minute  plans,  and  10  users  on  400- 
minute  plans,  the  group  of  100  users  can  consume 
a  total  of  76,000  minutes  per  month  without  addi¬ 
tional  charges. 

Although  other  providers  say  they  can  offer  pool- 


WIRELESS  CALLING  PLANS 

Services  compete  on  price, 
minutes  anti  pooling 
options,  but  some  are  more 
flexible  than  others. 


ing  for  some  customers  and  on  a  case-by-case  basis, 
Sprint  PCS  is  the  only  provider  that  offers  this  fea¬ 
ture  to  all  customers,  Egan  says.  He  expects  AT&T 
Wireless  to  have  pooling  available  before  year-end. 
BellSouth  Mobility  and  GTE  Wireless  are  offering 


this  feature  for  some  business  customers  as  well, 
but  GTE  Wireless  customers  cannot  combine  pool¬ 
ing  with  its  all-in-one  plan  called  America’s  Choice. 
This  plan  includes  long-distance  and  roaming  min¬ 
utes  over  GTE  Wireless’  digital  and  analog  cellular 
network  as  well  as  its  roaming  service  provider 
partner’s  networks.  Customers  can  choose  from 
three  pricing  plans  that  include  650, 1,100  or  1,500 
minutes  for  a  flat  monthly  rate  of  $95,  $125  and 
$155.The  monthly  prices  break  down  to  15, 11  and 
10  cents  per  minute,  respectively.  As  with  most 
wireless  service  provider  plans,  users  need  to  com¬ 
mit  to  the  maximum  bundle  of  minutes  in  order  to 
get  the  lowest  per-minute  rates. 


But  in  Bell  Atlantic  Mobile’s  case,  the  wireless 
service  provider  is  only  offering  one  package  for 
nationwide  roaming  and  long-distance.  Bell  Atlantic 
Mobile’s  Digital  Choice  Single  Rate  requires  users 
to  commit  to  a  1 ,600-minute-per-month  calling 
plan  that  costs  $160  if  they  want  national  calling 
features. 

While  Bell  Atlantic  Mobile’s  plan  isn’t  very  flexi¬ 
ble,  it’s  at  least  easy  to  understand,  which  cannot 
be  said  for  AirTouch’s  National  Calling  plans.  For 
one,AirTouch  does  not  have  the  same  National 
Calling  plan  available  in  all  areas  where  it  offers 
service.  And  where  it  does  have  the  same  plan, 
prices  vary. 

But  for  some  users,  a  regional  focus  may  be  what 
they  need.  Bell  Atlantic  Mobile,  BellSouth  Mobility, 
GTE  Wireless  and  AirTouch  are  offering  users  region¬ 


al  calling  plans  that  may  be  better  for  business  users 
who  tend  not  to  travel  outside  areas  such  as 
Southern  California  or  metropolitan  New  York. 

Whether  your  business  users  travel  across  the 
country  or  only  locally,  you  should  try  a  service  for 
30  days  before  committing,  says  Gartner  analyst 
Egan. 

“Users  have  to  look  for  a  combination  of  the 
coverage,  cost,  capacity  and  capabilities  of  that  ser¬ 
vice  provider  before  they  sign  any  contracts,”  he 
says.  “A  user  who  does  his  homework  will  save 
his  company  30%  to  50%  on  its  overall  wireless 
service  costs  over  another  user  who  doesn’t  take 
the  time  to  make  sure  it  works.”  3 


Comparing  wireless  plans 

In  the  past  six  months,  wireless  providers  across  the  country  have  introduced  new  pricing  plans  that 
promise  simplicity  and  lower  costs.  Most  include  nationwide  roaming  and  long-distance  calling  all  for 
one  price.  Here's  a  rundown  on  some  of  those  plans  and  how  they  compare. 


Service  provider 

Service  plan 

Minutes 

included 

Price  per 
month** 

Price  per 
minute 

Pooling  of 
minutes 

Keep  in  mind 

AirTouch 

National  Calling* 

500 

$75 

15  cents;  over 
500, 35  cents 

No 

Prices  and  plans  vary  in 
each  region. 

AT&T  Wireless 

Digital  One  Rate 

600 

$90 

15  cents;  over 
600, 25  cents 

Yes 

Must  commit  to  1 ,400  minutes 
togetlO-centrate. 

Bell  Atlantic  Mobile 

Digital  Choice 
Single  Rate 

1,600 

$160 

10  cents;  over 
1,600, 20  cents 

No 

No  national  plan  for  less 
than  1,600  minutes. 

BellSouth  Mobility 

All-in-one  Rate 

600 

$90 

15  cents;  over 
600, 25  cents 

No 

Must  live  in  BellSouth 
service  region. 

BellSouth  PCS 

All-in-one  Rate 

600 

$80 

13  cents;  over 
600, 25  cents 

No 

Roaming  in  fewer  cities  than 
cellular  service. 

GTE  Wireless 

America's  Choice 

650 

$95 

15cents;over 
650, 25  cents 

No 

Pooling  only  available  with 
other  plans. 

Omnipoint 

North  America 
OmniRate 

700 

CD 

CD 

14  cents;  over 
700, 39  cents 

No 

No  coverage  in  Dallas  and 
Chicago. 

Sprint  PCS 

Clear  Wireless 
Workplace 

600 

$70 

12  cents;  over 
600, 25  cents 

Yes 

Users  pay  extra  for  calls  off 
Sprint  PCS  net. 

*  Plan  for  Southern  California  "  These  are  individual  user  prices.  Each  provider  says  volume  discounts  apply. 
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It’s  not  surprising  that  the  interior  of  the  Compaq  ProLiant 
6400R  is  entirely  tool-free.  After  all,  like  every  ProLiant 
server,  it’s  been  designed  with  customer  input  from  the  very 
start.  With  maximum  4-way  computing  power  in  just  4U, 
and  comprehensive  reliability  features  for  maximum 


Is  a  space-optimized 
server  that  requires 
more  than  these  five 
tools  truly  optimized? 


uptime,  the  ProLiant  6400R 
is  just  what  you’ve  come  to  expect  from  the  leader  in  rack 
servers.  And  with  handy  features  like  top  and  side  access  panels, 
a  unique  cable  management  arm  and  simple  slide-out  rails,  it’s 
exactly  what  your  data  center  needs.  Let  the  unsurpassed  server 
experience  embodied  in  our  ProLiant  6400R  give  you  a  hand  in 
solving  your  business  IT  problems,  www.compaq.com/hand 


Compaq 
ProLiant  6400R 

•  Up  to  four  Intel *  Pentium 
III  Xeon"1  processors 

•  Innovative,  modular 
4U  design  (7") 

•  PCI  Hot  Plug 

•  64-bit  PCI 

•  Compaq  Insight  Manager 


pentium®/// 
xeon,  .’7 


COMPAQ.  Better  answers. 


All  last-mile  media 
supported  for 
voice,  video  and 
data  applications 


Easily  assigned 
access  privileges 
for  employees, 
partners  and 
vendors 


End-to-end  QoS 
across  any  technol- 

Firewalls  and  °Sf  with  fu"  billin8 

encryption  for  and  accountinS 

secure  connectivity 
over  Internet  and 
intranet 


Sees  a  favorite 
fire  hydrant  in 
the  distance 


SmartVPN  solutions  for  secure,  high-speed  and  low-cost  remote  networking. 


Cabletron’s  VPN  solutions  give  your  customers  the  freedom  to  conduct  their  business  safely  and  affordably...even  from  the  most  remote  sites.  Naturally, 
this  means  more  business  for  you.  For  more  information,  call  toll  free  1-877-818-0925  and  we’ll  send  you  a  free  whitepaper  on  VPN  technology. 
Or  visit  us  on  the  web  at  www.cabletron.com/smartvpn.  Cabletron  Systems,  your  ^-business  communications  specialist.” 
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Latitude  Communications  last 
week  announced  that  it  has  inte¬ 
grated  its  MeetingPlace  collabo¬ 
ration  server  with  Lotus  Notes 
and  Domino. 

The  integration  lets  Notes  and 
Domino  users  directly  schedule 
meetings  on  the  Meeting- 
Place  soft¬ 
ware/hardware 
server  and 
notify  all 
attendees  via 
e-mail. 

Each  e-mail 
message  has 
embedded 
links  for  con¬ 
necting  to  the 

conference  over  the  telephone 
and  through  a  browser. 

MeetingPlace  for  Notes  is 
available  for  $20,000.  Latitude 
also  offers  similar  integration  for 
Microsoft  Outlook  clients. 


Latitude  ex¬ 
tends  its  sched¬ 
uling  tool. 


C'rtrix  Systems,  a  Fort  Lauder¬ 
dale,  Fla.,  maker  of  thin-client 
and  server  software,  last  week 
announced  plans  to  buy  Web 
application  development  tools 
company  ViewSoft  for  about 
$32  million. 

Citrix  plans  to  use  ViewSoft's 
technology  to  extend  Citrix's 
thin-client  and  server-based 
computing  technology  to  Web- 
enabled  and  multitier  applica¬ 
tions.  The  move  furthers  Citrix's 
Internet  strategy. 

The  company  started  its 
move  to  Web-based  technology 
with  the  development  of  Appli¬ 
cation  Launching  and  Embed¬ 
ding,  which  enables  Windows- 
based  applications  to  be 
launched  from  or  embedded 
into  HTML  pages. 

Citrix  and  ViewSoft  hope  to 
complete  the  transaction  by 
October. 

Both  companies'  boards  have 
already  approved  the  deal. 

Provo,  Utah-based  ViewSoft, 
which  has  not  released  a  prod¬ 
uct,  has  22  employees. 


IN -SITE:  Lessons  from  Leading  Users 


Athletic  shoe  makers  enter  e-commerce  race 


BY  ELLEN  MESSMER 


he  race  into  electronic  commerce 
has  just  started  for  big-name  ath¬ 
letic  shoe  manufacturers.  And  it’s 
looking  as  though  they’ve  got  an 
obstacle  course  to  navigate. 

Just  this  spring, 

Nike, Adidas  and  Fila 
broke  with  past  sales 
practices  by  launch¬ 
ing  Web  sites  to  sell 
directly  to  the  public 
online.  Reebok  Inter¬ 
national  is  hinting  it 
may  soon  do  the 
same. 

While  initial  cus¬ 
tomer  reaction  to  the 
sites  has  been 
strong,  it’s  hard  to 
get  the  shoe  to  fit 
when  it  comes  to 
selling  directly 
through  the  ’Net. The 
shoe  makers  have 
worked  hard  to 
establish  good  rela¬ 
tionships  with  retail 


Shoe  makers  Adidas,  Nike  and  Fila  have  burst  onto  the  e-commerce  scene  with  attractive  Web  sites. 


stores  and  other  distributors  over 
the  years  and  now  risk  jeopardizing 
those  relationships  by  competing  for 
online  sales. 

Take  Adidas,  for  example. The  com¬ 
pany,  which  started  selling  online  in 
May,  is  trying  to  determine  what  to  do 
about  unauthorized  online  Adidas 
shoe  sellers. 

“Technically,  no  one  [aside  from 
Adidas]  has  rights  to  sell  Adidas  prod¬ 


ucts  on  the  Web,”  says  Annette  Shroud, 
the  company’s  director  of  e-com- 
merce.“It’s  not  covered  in  our  terms 
of  agreement.” 

Adidas  is  quietly  trying  to  rein  in 
renegade  online  distributors,  while 
at  the  same  time  defining  its  Web 
retailing  policy  and  bolstering  its 
Web  expertise. 

“Unless  we  have  some  level  of  pro¬ 
ficiency  on  the  Web,  we  won’t  be  able 


to  offer  resources  or  guidelines  to  our 
retail  partners,”  Shroud  says. 

Fear  of  distributor  uprisings  has 
convinced  some  shoe  manufacturers, 
such  as  New  Balance  Athletic  Shoe, 
that  it’s  best  to  avoid  direct  Internet 
sales.  New  Balance,  though,  does  seek 
to  exert  control  on  how  its  distribu¬ 
tors  sell  on  the  Internet. 

“One  of  the  main  things  [New 

See  Shoes,  page  42 


Keynote  adds  new  perspective  to  Web  site  management 


BY  JEFF  CARUSO 

SAN  MATEO,  CALIF.  —  Keynote 
Systems  last  week  updated  its  perfor¬ 
mance  monitoring  service,  an  offering 
for  companies  trying  to  keep  a  close  eye 
on  how  their  Web  sites  are  running. 

For  a  monthly  fee,  Keynote’s  Perspec¬ 
tive  service  measures  how  fast  its  comput¬ 
ers  are  able  to  access  a  company’s  Web  site 
from  many  points  around  the  world.  With 
Version  4.0,  network  managers  can  see 
how  much  Web  caches  improve  perfor¬ 
mance  and  can  determine  the  performance 


seen  by  a  typical  end  user. 

Service  providers  and  Web-site  hosting 
companies  use  caches  to  keep  copies  of 
Web  pages  in  different  parts  of  their  net¬ 
works  so  users  can  access  the  copy  clos¬ 
est  to  them.  This  keeps  traffic  off  net¬ 
work  backbones  and  is  designed  to 
improve  performance.  Enterprises  can 
use  Perspective  to  verify  that  a  service 
provider  using  caches  actually  provides 
faster  access  to  Web  pages. 

The  new  Web  cache  performance  mea¬ 
surement  capabilities  appeal  to  AdForce, 
a  Cupertino,  Calif.,  company  that  delivers 


advertisements  on  the  Internet. 

“We’re  always  looking  for  ways  to  pro¬ 
vide  our  media  faster  and  ultimately  at  a 
reduced  support  cost,”  says  Richard 
Theige,  vice  president  of  operations. 

AdForce  already  uses  Perspective  as  a 
troubleshooting  tool, Theige  says.  If  users 
complain  of  delays,  the  company  can 
turn  to  Perspective  to  find  out  where  in 
the  network  the  delays  are  happening, 
he  says. 

Keynote  has  many  sites  worldwide 
that  periodically  access  service  sub- 

See  Perspective,  page  42 
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Slow  multicast  maturity  leaves  lETFers  stumped 


BY  SANDRA  GITTLEN 

OSLO,  NORWAY  —  ISPs  are  showing 
signs  of  wear  from  dealing  with  imma¬ 


ture  multicast  protocols,  but  they  aren’t 
quite  ready  to  throw  the  baby  out  with 
the  bath  water. 

At  the  45  th  Internet  Engineering  Task 


Force  meeting  in  Oslo  last  week,  ISPs 
joined  researchers  and  vendors  to  dis¬ 
cuss  the  options  for  improving  current 
multicast  protocols,  such  as  Protocol 
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WHAT  DOES 
QMS  MEAN 
TO  YOU? 

Spooling,  loading,  queuing. 
No  matter  what  you  call  it, 
waiting  for  documents  to 
print  can  bring  your 
productivity  to  a  halt.  But 
award-winning  QMS®  laser 
printers  solve  your  network 
traffic  problems  with  print 
speeds  of  up  to 
40  pages  per  minute. 
Featuring  web-based  printer 
management,  job  spooling 
and  serverless  printing,  QMS 
print  systems  make  the  most 
of  your  network 
bandwidth  and  your  time. 
So  your  team  can  make  the 
most  of  the  work  day. 


Laser  printers  that  enhance  your  vision. 

1-800-392-6247 

www.qms.com 


Independent  Multicast.  At  the  packed 
session  last  Tuesday,  ISPs  aired  their 
concerns  about  the  present  standards 
and  offered  protocol  designers  sugges¬ 
tions  for  how  to  proceed. 

“We’re  going  through  some  pretty 
serious  growing  pains  at  the  moment,” 
said  Jeremy  Hall,  a  UUNET  engineer. 

Today’s  multicast  protocols,  which 
are  being  deployed  in  ISP  networks,  let 
users  join  router  groups  and  send  their 
data  to  multiple  users.  For  instance, 
newsletter  dispatches  can  be  per¬ 
formed  using  multicast. 

But  multicast  has  several  problems. 
First,  there  is  a  lack  of  interdomain 
multicast  protocol  implementations, 
Hall  told  session  attendees.  This  caus¬ 
es  transmission  glitches  for  users  who 
want  to  multicast  to  other  users  out¬ 
side  of  the  ISP’s  network. 

Second,  there  is  uncertainty  about 
how  far  forwarding  tables  can  scale. 
Right  now,  multicast  is  not  being 
pushed  to  its  limits,  but  as  video  dis¬ 
tribution  across  the  ’Net  pushes  the 
technology  to  the  fore,  that  might 
change. 

Third,  with  a  corrupted  multicast 
session  there  is  no  way  to  determine 
where  the  trouble  lies,  because  the 
process  is  transparent.  There  is  no 
clear  path  in  which  the  information 
travels  that  can  be  traced  to  fix  the 
problem,  Hall  said.  Also,  users  don’t 
understand  multicast  so  they  are 
unable  to  help  the  ISPs  troubleshoot 
when  problems  arise. 

Finally,  security  is  a  big  issue  for  ISP 
customers  such  as  TV  and  radio  stations 
that  want  to  broadcast  over  the  ’Net. 
With  the  current  set  of  multicast  proto¬ 
cols,  there  is  no  way  to  have  a  host  and 
groups.  Instead,  there  are  just  groups  of 
multicast  participants,  which  means 
anyone  could  act  as  the  sender.  In  the 
case  of  TV  over  the  ’Net,  this  leaves  the 
broadcaster  wide  open  to  pirating. 

One  option  is  for  the  multicast 
model  to  change  to  single  source,  mean¬ 
ing  a  host  could  send  data  out  to  users, 
but  they  couldn’t  necessarily  transmit 
back,  said  Hugh  Holbrook,  a  Stanford 
University  Ph.D.  student  and  co-author 
of  a  multicast  model  called  Explicitly 
Requested  Single-Source  multicast. 

Having  a  host  and  recipients  model 
gives  ISPs  more  control  than  they  have 
over  a  many-to-many  model.  First,  the 
routers  in  the  network  would  track 
how  many  receivers  of  the  broadcast 
there  are  and  send  information  back  to 
the  known  host.  Having  a  known  host 
also  allows  for  security.  Suddenly,  users 
have  control  over  who  accesses  the 
broadcast.  They  could  even  have 
authenticated  subscriptions  to  their  ser¬ 
vices,  Holbrook  said. 

But  ISPs,  such  as  UUNET  and  Verio, 
say  the  management  involved  in  main¬ 
taining  several  types  of  multicast  might 
be  overwhelming.  It  might  make  more 
sense  to  just  enhance  the  current 
model,  they  say.  E 


'■  ':x  4 

3 

.  r  a 

6  3 


,  v  L 

l 

■  ;  :9 

f 

'  Jj  | 


B 

I  v- 

i 

I 

I 

I 

|i§  r  si 

-  ."*  '  'Vs  T 


fcStefc.-- 


f;  'imm 


iw 


Succeeding  in  e-business  means  rapidly 
extending  business-critical  applications  to  users 
worldwide.  The  fastest,  most  cost-effective  way 
to  do  this  is  to  leverage  your  existing  network 
and  technology — not  to  buy  new  hardware, 
expand  bandwidth  or  rewrite  applications. 

Today,  thousands  of  companies  are  using 
Citrix®  solutions  to  get  more  out  of  their  existing 
IT  investments.  They’re  meeting  e-business  and 
Y2K  objectives,  and  even  extending  the  latest 
HR,  ERP,  customer  billing,  productivity  and 
other  applications  to  users  anywhere,  anytime. 
Plus,  they’re  lowering  costs,  gaining  efficiencies 
and  improving  levels  of  service. 

To  learn  how  you  can  get  more  out  of  your 
IT  investment,  get  a  FREE  Tolly  Group  white 
paper  today. 


Now  everything  computes. 

dTRIX' 


FREE  Total  Cost  of  Application  Ownership  white  paper! 

See  how  you  can  reduce  your  total  cost  of  application 
ownership  and  get  more  out  of  your  existing  IT  investment. 

Call  888.415.4303 


©  Copyright  1990-1999  Citrix  Systems,  Inc.  All  rights  reserved.  Citrix  is  a  registered  trademark  and  “Now  everything  computes.”  is  a  trademark  of  Citrix  Systems,  Inc. 
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Enterprise  Applications 

Active  Directory  support  systems  come  to  the  fore 


Active  Directory  tools 

With  complex  deployments  of  Active  Directory  looming  for  those  moving  to  Windows 
2000,  vendors  are  rushing  to  provide  tools  to  ease  migrations. 


Company 

Product 

Description 

Microsoft 

Domain  Migrator 

Licensed  from  Mission  Critical  for  running 

NT  domains  and  Active  Directory  in  parallel. 

Fast  Lane 

DM/Manager,  D  M/Ad  mini  strato  r 

Tools  for  making  forklift  and  incremental 
upgrades. 

Entevo 

DirectManage 

Tools  for  modeling  and  administering 

Active  Directory  and  managing  Exchange. 

BY  JOHN  FONTANA 

If  there  is  any  doubt  that 
M icrosoft’s  forthcoming  Active 
Directory  will  be  a  huge  tech¬ 
nology  challenge  for  enter¬ 
prises,  look  no  further  than 
the  rash  of  support  packages 
springing  to  life  to  aid  in  the 
directory’s  rollout. 

Over  the  past  few  months, 
vendors  have  been  talking 
about  migration,  modeling  and 
management  environments,  all 
intended  to  help  enterprises 
move  from  NT’s  flat  domain 
structure  to  Active  Directory’s 
hierarchical  construction. 

Network  executives,  busy 
devising  strategies  for  this  crit¬ 
ical  upgrade,  are  happy  to  hear 
the  banter.  And  that  talk  got 
louder  last  week  when  Entevo 
unveiled  two  new  tools  for  its 
DirectManage  directory  man¬ 
agement  suite. 

Microsoft  got  into  the  Active 
Directory  support  act  itself  last 
month  by  licensing  technology 
from  Mission  Critical  Software 
for  inclusion  in  Windows  2000, 
which  will  also  include  Active 
Directory.  The  Mission  Critical 
software  will  let  users  run  NT 
domains  and  Active  Directory 
in  parallel  and  roll  back 


changes  if  things 
start  to  go  haywire. 

The  Microsoft 
move  addressed 
concerns  about  a 
harrowing  migra¬ 
tion  path  the  com¬ 
pany  had  sug¬ 
gested  —  a  live,  pro¬ 
duction  upgrade  to 
Active  Directory. 

And  previous  to 
that  announcement, 

Fast  Lane  Tech¬ 
nologies  chimed  in 
with  two  deployment  kits  for 
making  forklift  and  incremental 
upgrades.  The  kits  include  Fast- 
Lane  DM/Manager  for  migrating 
users  and  groups  to  Active 
Directory,  and  FastLane  DM/ 
Administrator  for  modeling 
Active  Directory  domain  trees 
and  structures. 

“In  terms  of  Microsoft  push¬ 
ing  Windows  2000  as  its  full 
package  for  corporate  net¬ 
works, Active  Directory  is  a  big 
part  of  the  story,”  says  Rick 
Villars,  an  analyst  with  Inter¬ 
national  Data  Corp.  in  Framing¬ 
ham,  Mass. 

And  it’s  a  complex  part  at 
that. 

“There  is  no  doubt  that  mov¬ 
ing  to  Active  Directory  is  a 


major  undertaking,”  says  George 
White,  director  of  the  Bureau  of 
Desktop  Technology  for  the 
Commonwealth  of  Pennsylva¬ 
nia.  White  is  using  tools  from 
Entevo  to  help  him  with  a  pro¬ 
ject  designed  to  convert  40,000 
desktops  to  a  common  e-mail 
system  and  directory  structure. 

“I  would  not  want  to  attack 
this  problem  without  these 
tools, ’’White  says. 

He  may  get  even  more  help 
from  Entevo ’s  new  tools. 

DirectMigrate  2000  is  a  wiz¬ 
ard-based  product  that  auto¬ 
mates  the  migration  of  data  to 
Active  Directory.  It  supports  36 
migration  scenarios  and  fea¬ 
tures  a  test  environment  and 
rollback  options.  A  feature 


called  DirectMap  allows  NT 
domain  data  to  be  mapped  to  a 
pilot  environment  for  trial  and 
error  testing. 

Entevo  also  added  Exchange 
Plus  Pack  to  DirectManage.  With 
the  pack,  users  can  manage  any 
object  in  the  Exchange  directo¬ 
ry,  including  public  folders.  It 
also  has  a  tool  called  Action- 
Reports  that  allows  manage¬ 
ment  tasks,  such  as  deleting 
users  or  changing  folder  owner¬ 
ship,  to  be  executed  from  with¬ 
in  report  query  results. 

Entevo  also  has  upgraded 
the  DirectAdmin  component  of 
its  DirectManage  suite  so  that 
users  can  manage  Active  Direc¬ 
tory,  NT  domains,  Exchange 
and  Novell  Directory  Services 


directories  from  a  sin¬ 
gle  console.Version  30 
of  DirectAdmin  also 
has  new  filtering  capa¬ 
bilities  for  assigning 
different  levels  of 
access  to  each  net¬ 
work  administrator.  In 
addition,  DirectAdmin 
3  0  has  a  new  scripting 
engine  for  automating 
tasks  and  a  Web  inter¬ 
face.  It  also  supports 
Windows  Terminal 
Server  and  Remote 
Access  Service. 

“With  Windows  2000,  there 
is  a  lot  of  new  technology  for 
IT  to  get  its  hands  on,”  says 
Silas  Matteson,  director  of 
product  management.  “We’ll 
provide  tools  in  phases.  This 
first  phase  helps  in  the  migra¬ 
tion  to  Active  Directory.  The 
next  phase  we  will  add  tools 
for  things  such  as  trust  man¬ 
agement  across  Windows  2000 
and  NT  4.X  domains.” 

DirectMigrate  2000,  a  free 
download,  and  DirectAdmin 
3.0  will  be  available  in  August. 
DirectAdmin  costs  $19  per 
managed  account.  The  Ex¬ 
change  Plus  Pack  is  available 
now  and  costs  $5  per  man¬ 
aged  account.  B 


Perspective, 

continued  from  page  39 

scribers’  Web  sites.  The  sites 
are  checked  every  1 5  minutes. 
If  a  site  has  a  response  time 
that  exceeds  a  set  threshold, 
Keynote  notifies  the  sub¬ 
scriber  by  pager  or  e-mail.  The 
service  also  provides  daily  per¬ 
formance  reports  via  e-mail. 

Theige  says  he’d  like  to  see 
the  service  check  perfor¬ 
mance  more  frequently  than 
every  1 5  minutes  so  he  would 
be  alerted  to  problems  more 
quickly. 

Keynote  faces  com¬ 
petition  from  Service 
Metrics,  which  has  a 
similar  offering,  says 
Bill  Gassman,  senior 
research  analyst  at 
Gartner  Group.  He 
adds  that  many  com¬ 
panies  would  prefer 
to  measure  their  own 
performance,  using 
tools  from  vendors 
such  as  NextPoint, 
which  sells  software 


that  runs  on  users’  LANs  rather 
than  on  the  Internet. 

“If  you’re  an  IT  department 
really  needing  to  dig  down 
into  the  parts  of  a  transaction 
to  figure  out  what’s  broken, 
you  probably  want  to  have  the 
tool  in-house,”  Gassman  says. 
But  he  says  many  firms  relying 
on  a  Web-hosting  service 
might  also  be  interested  in  a 
performance  measurement 
service. 

The  new  version  of  Keynote 
Perspective  is  available  now, 
starting  at  $295  per  month.  B 


Shoes, 

continued  from  page  39 

Balance]  has  asked  us  is  to 
develop  a  separate  online  staff 
to  ensure  good  customer  ser¬ 
vice  in  Web  sales,”  says  Joe 
Clendenny,  owner  of  the  New 
Balance  Athletic  Shoe  Store  in 
Chicago.  His  store  is  one  of 
roughly  two  dozen  New 
Balance  retail  stores  across 
the  U.S. 

Clendenny’s  online  store  — 
which  can  be  reached  through 
several  different  URLs  that 
include  newbalance  online, 
com,  nbwebexpress.  com  and 
achievenewbalance.  com  — 
now  employs  five  people  just 
for  filling  Web  orders  from  all 
over  the  country. 

Clendenny  says  New 
Balance  forbids  him  from  fill¬ 
ing  orders  for  international 
sales  out  of  concern  that  it 
could  disrupt  relations  with 
New  Balance  shoe  distributors 
overseas. 

For  shoe  makers  jumping 
into  online  sales,  there’s  plenty 


to  think  about.  For  instance, 
the  manufacturers  need  to 
adapt  their  merchandise  ware¬ 
housing  standards  and  estab¬ 
lish  relationships  with  new 
technology  partners  capable 
of  designing  and  managing 
Web  sites. 

Accustomed  to  shipping 
bulk  orders  to  distributors, 
Fila,  Nike  and  Adidas  have  each 
chosen  to  outsource  their  Web 
fulfillment  operations  to  spe¬ 
cialists  such  as  Penske  Logis¬ 
tics  and  UPS  Logistics. 

Such  specialists  are  able  to 
turn  orders  around  quickly, 
says  Todd  McDonald,  director 
of  e-commerce  at  Fila  USA.  Fila 
last  month  started  selling  on 
the  Web  and  uses  a  company 
called  Impac  to  handle  inven¬ 
tory  and  warehousing. 

The  sneaker  kings  have  also 
outsourced  much  of  their  Web 
operations  to  other  companies. 

Digex,  for  instance,  hosts 
electronic  catalog  servers  for 
Nike  and  Adidas,  while  Pan- 
desic  provides  the  catalog  and 
back-end  integration  services 


for  Adidas  and  Fila.  A  legion  of 
Web  graphics  designers  and 
consultants,  such  as  US  Inter¬ 
active  and  Red  Sky,  have  been 
summoned  to  walk  the  shoe 
moguls  through  their  e-com- 
merce  launches. 

Gene  Alvarez,  an  analyst 
with  Meta  Group,  a  consulting 
firm  in  Stamford,  Conn.,  says 
impressive  Christmas  season 
Internet  sales  across  numerous 
industries  convinced  athletic 
shoe  manufacturers  to  get 
their  Web  acts  together. 

“Now  that  consumers  are 
trusting  enough  to  enter  their 
credit  card  numbers  on  the 
Internet,  manufacturers  realize 
they  have  a  chance  at  grabbing 
the  full  margin  of  profit  for 
themselves,"  Alvarez  says. 

But  their  success  is  highly 
uncertain,  he  adds.  Besides 
channel  conflict  problems, 
manufacturers  in  this  $15  bil¬ 
lion  industry  are  contending 
with  other  more  basic  issues, 
such  as:  Wouldn’t  most  con¬ 
sumers  want  to  try  shoes  on 
before  buying  them?  B 
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it:,,. 

f  IIV( 

Manage.  Anything.  Anywhere." 


e-business 


Enterprise  Applications 


Work  starts  soon  on  new  Java  data  interface 


BY  JOHN  cox 

Sometime  in  the  next  few  weeks,  a 
newly  appointed  group  of  Java  pro¬ 
grammers  will  start  work  on  building  a 
direct  bridge  between  Java  applica¬ 
tions  and  stored  data. 

But  it  will  likely  take  until  spring  of 
next  year  for  the  first  draft  of  the  Java 
Data  Objects  (IDO)  API  to  be  ready  for 
public  review. 

The  JDO  specification  will  be  crafted 
by  an  “expert  group”  as  part  of  the  Java 
Community  Process,  a  set  of  proce¬ 
dures  and  policies  for  creating  new  Java 
standards.  The  group,  along  with  a 
“specification  lead”  who  coordinates 
the  work,  have  been  appointed  but  not 
announced,  says  Craig  Russell,  a  prod¬ 
uct  architect  at  Sun. 

Russell  says  he  expects  the  group 
will  work  six  to  nine  months  to  create 
the  first  JDO  draft.  Then  the  larger 
world  of  Java  developers  will  get  a 
chance  to  study  and  critique  the  draft. 


The  group  will  then  make  adjustments 
and  publish  a  final  JDO  version,  proba¬ 
bly  later  in  2000. 

Today,  when  Java  programmers  deal 
with  data  stored  in  file  systems  or  data¬ 
bases,  they  have  to  understand  the  spe¬ 


cific  features  of  that  data  store  and 
understand  how  to  talk  to  it.  In  effect, 
they  are  always  translating,  a  process 
sometimes  called  “mapping,”  between 
Java  terms  and  the  terms  understood 
by  a  relational  or  object  database. 


“If  you  have  a  large  Java  object  model 
with  many  relationships  and  use  of 
inheritance  [one  object  borrowing  fea¬ 
tures  and  data  from  another],  just  the 
code  to  deal  with  all  the  mapping  to 
and  from  the  database  consumes  about 

30%  of  the 
complete 
application 
software,”  says 
David  Jordan, 
a  member  of 
the  JDO 
expert  group 
and  a  senior 
programmer 
with  Ericsson. 
“With  JDO, 
none  of  this 
code  is  necessary:  It  gets  generated  auto¬ 
matically  by  the  JDO  implementation.” 

With  JDO,  a  programmer  can  write  a 
Java  application  that  simply  looks  up 
objects,  such  as  “Customer”  or  “Order,”  by 
name  and  accesses  related  records  by 


navigating  through  the  use  of  simple  ref¬ 
erences.  Without  JDO,  the  programmer 
has  to  write  specific,  detailed  calls  to  a 
particular  database  to  accomplish  this. 

The  actual  implementation  of  JDO 
—  the  code  that  will  handle  this  auto¬ 
matically  —  will  be  written  by  data¬ 
base  vendors  and  other  third  parties. 

JDO  will  be  an  improvement  to 
today’s  Java  Database  Connectivity 
interface,  which  describes  a  standard 
way  to  write  the  code  needed  to 
access  relational  databases,  and  an 
alternative  to  JDBC. 

If  you’re  storing  data  in  relational 
databases,  as  is  common,  then  JDO 
enhances  JDBC,  says  Henry  Parnell, 
product  manager  for  Object  Design,  an 
object  database  vendor. 

“If  your  point  of  view  is  that  it 
would  be  better  to  store  the  persis¬ 
tent  Java  objects  in  their  native  forms 
in  an  object  database,  then  JDO  gives 
you  a  Java-standard  way  of  doing  that,” 
he  says.  3 


■  JDO  will  be  an  improvement 
to  today's  Java  Database 
Connectivity  interface,  which 
describes  a  standard  way  to 
write  the  code  needed  to 
access  relational  databases. 
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Quit  running  between  control  stations.  Stop  balancing  that  keyboard  on  your  knee. 
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most  of  their  arguments  when  they 
have  gone  to  court. 

In  one  case,  regarding  DAT  record¬ 
ers,  the  copyright  holders  went  to 
Congress  to  get  what  they  could  not  get 
in  court.  Much  of  the  ugly  history  can 
be  found  at  www.hrrc.org/history. 
html.  Each  time  they  have  fought,  the 
principal  effect  has  turned  out  to  be  a 
delay  in  the  widespread  availability  of 
some  new  technology. 

Considering  the  clarity  of  the 
Supreme  Court  decision  in  a  separate 
VCR  case,  it  is  not  hard  to  see  why  the 
copyright  people  went  to  Congress 
instead  of  depending  on  the  courts: 
“The  sale  of  copying  equipment . . .  does 
not  constitute  contributory  infringe¬ 
ment  if  the  product  is  widely  used  for 
legitimate,  unobjectionable  purposes  or, 
indeed,  is  merely  capable  of  substantial 
noninfringing  uses.”  Yet,  last  year  copy¬ 
right  holders  did  the  same  thing  again 
and  went  to  court  in  an  attempt  to  get  a 
portable  MP3  player  banned  from  sale 
in  the  U.S.  Copyright  holders  again  lost 
in  court,  although  they  could  still  appeal 
to  the  Supreme  Court. 

What’s  wrong  with  this  picture? 
Every  time  the  entertainment  industry 
has  lost  its  argument  and  the  new  tech¬ 
nology  has  become  widely  available, 
the  industry  has  made  a  pile  of  money. 
The  best  example  is  VCRs.  The  movie 
industry  now  makes  almost  as  much 
money  off  video  sales  as  it  does  from 
first-run  theater  tickets.  VCRs  have  pro¬ 
vided  a  way  for  the  movie  people  to 
sell  to  couch  potatoes.  One  area  in 
which  this  has  not  happened  is  with 
DAT;  the  legal  delay  seems  to  have 
killed  the  technology. 

There  may  be  a  hint  that  learning  is 
going  on  in  the  copyright  world.  The 
Recording  Industry  Association  of 
America  (www.riaa.org/)  is  working  on 
a  plan  that  will  permit  the  sale  of  MP3 
devices  (which  the  courts  might  force 
anyway)  in  exchange  for  an  agreement 
by  equipment  vendors  to  also  support 
some  yet-to-be-finalized  secure  digital 
audio  technology  in  the  future. 

But  what  I  don’t  see  is  real  thinking. 
Why  don’t  copyright  owners  deter¬ 
mine  new  ways  to  do  business  in 
which  consumer  honesty  is  not  penal¬ 
ized  as  much  as  it  is  with  CDs  —  in 
which  the  sale  price  is  10  to  15  times 
the  manufacturing  cost  (and  you  know 
the  artists  are  not  getting  all  the  differ¬ 
ence).  If  I  could  legally  download  a  sin¬ 
gle  song  over  the  Net  for  50  cents,  I’d 
do  that  in  a  heartbeat  rather  than  go 
through  the  pain  of  copying  a  friend’s 
CD  or  using  an  illegal  download  site 
that  might  keep  a  log  of  visitors. 

Disclaimer:  Real  thinking  is  what 
Harvard  is  all  about,  but  the  above 
lament  is  mine  alone. 

Bradner  is  a  consultant  with 
Harvard  University’s  University 
Information  Systems.  He  can  be 
reached  at  sob@harvard.edu. 


It's  likely  even  the  most  experienced  IT  profession¬ 
al  doesn't  know  all  the  potential  power  threats  —  from 
subtle  distortions  that  damage  data,  to  full-blown 
blackouts  that  shut  down  a  business. 
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for  the  broadest  protection  —  recommended  for  the 
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Or  call  us  at  877-PWRWARE  (877-797-9273).  Before 
the  sun  sets  on  your  systems. 
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‘Net  Insider .  Scott  Bradner 

IS  THERE  SOME  LEARNING  GOING  ON? 


They  fight  technology  each  time 
something  new  shows  up.  When 
they  lose,  as  they  have  so  far,  it  turns 
out  they  actually  win.  But  they  still 


fight  the  next  time. 

The  “they”  I  speak  of  are  copyright 
holders  —  in  particular,  those  in  the 
entertainment  industry.  They  fought 


audiotape,  VCRs  and  digital  audio  tape 
(DAT),  and  now  are  fighting  MP3  music 
technology  and  the  Internet.  Each  time 
the  copyright  holders  have  lost  all  or 
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Ask 

Dr  Intranet 

By  Steve 
Blass 

Management 
has  asked  us  to 
expand  our  intra- 
net/extranet  infra¬ 
structure  to  support  a 
new  e-commerce 
initiative  but  has  not 
provided  any  specifics  about 
what  it  wants.  How  would  you 
recommend  we  get  started? 

Via  the  Internet 

I  recommend  a  three-step 
exercise  that  starts  with  a  needs 
assessment.  Establish  in  writing 
the  overall  goals,  implementa¬ 
tion  objectives  and  operational 
characteristics  you  expect.  Will 
you  take  the  existing  business 
model  online  or  does  e-com¬ 
merce  call  for  a  new  process? 

Next,  information  and 
process-flow  analysis  identifies 
the  who,  what,  when,  where, 
why  and  how  of  presenting  in¬ 
formation  to  prospective  cus¬ 
tomers,  taking  orders,  collecting 
payment,  confirming  fulfillment, 
tracking  shipments  and  provid¬ 
ing  customer  service  under  the 
proposed  model.  The  result  is  a 
map  of  where  the  required  data 
comes  from;  who  creates,  owns 
and  manages  it;  how  electronic 
transactions  flowthrough  busi¬ 
ness  processes;  and  why  partic¬ 
ular  e-commerce  system  inter¬ 
faces  are  necessary. 

The  last  phase  is  a  readiness 
assessment  during  which  you 
examine  the  current  computing 
environment's  ability  to  support 
the  functionality  documented  in 
the  previous  two  steps. 

After  completing  these  dis¬ 
covery  activities,  you  should 
have  a  clear  understanding  of 
where  the  company  wants  to 
go,  what  it  will  take  to  get  there, 
how  it  is  going  to  work  when  it's 
done,  and  what  kind  of  founda¬ 
tion  there  is  to  start  building  on. 

Blass  is  a  network  archi¬ 
tect  at  Sprint  Paranet  in 
Houston.  You  can  reach  him 
at  drintranet@paranet.com. 


An  Inside  Look  at  the  Technologies 
and  Standards  Shaping  Your  IMetwork 


Lighten  LAN  loads  with  GMRP 


BY  VIPIN  JAIN  AND 
HAMID  KARIMI 

Multicasting  is  familiar  to  most 
enterprises  as  an  IP,  or  Layer 
3,  technique  that  maximizes 
LAN  productivity  by  sending  packets 
over  a  one-to-many  topology.  Now, 
thanks  to  last  year’s  emergence  of  the 
GARP  Multicasting  Registration  Protocol 
(GMRP),  multicasting  can  be  performed 
at  Layer  2,  as  well. 

The  result  is  even  greater  productivity 
and  a  more  efficient  flow  of  data  through 
LAN  switches. 


way.  Through  these  forks,  the  replicated 
packets  are  forwarded  to  users  who  have 
joined  the  multicast  group. 

The  process  is  highly  efficient 
because  the  packet  is  replicated  only  as 
many  times  as  is  necessary  to  reach 
every  registered  user.  However,  once  the 
packets  hit  the  Layer  2  switches  that  are 
typically  feeding  workgroups  at  the  net¬ 
work’s  edge,  traffic  congestion  can 
mount.  Layer  2  switches  cannot  read  the 
Layer  3  IP  Multicast  address,  so  they  are 
forced  to  flood  the  LAN  by  sending  mul¬ 
ticast  packets  to  all  connected  client  PCs 
and  workstations. 


nation  multicast  MAC  address  that  can  be 
instantly  identified  by  the  switch  as  a 
GMRP  multicast  address.  This  is  called  a 
“well-defined”  address,  and  it  lets  the 
switch  know  that  the  packet  should  be 
sent  to  the  switch’s  GMRP  software  for 
processing  —  a  time-saving  device 
because  the  switch  doesn’t  have  to 
inspect  the  packet  any  further. 

An  attribute  list  is  also  inside  the  PDU, 
in  the  data  portion.  The  list  contains  the 
information  necessary  for  the  switch’s 
GMRP  software  to  do  its  job. 

Besides  its  simplicity,  GMRP  has  other 
benefits.  Because  the  GMRP  packet  uses 


HOW  IT  WORKS 


GARP  Multicasting 
Registration  Protocol 

Designed  to  extend 
the  benefits  of  Layer 
3  multicasting  to  the 
edges  of  networks, 

GMRP  overcomes  the 
inability  of  Layer  2 
switches  to  read 
Layer  3  IP  Multicast 
addresses.  The  result 
is  more  efficient  data 
flow  through  LAN 
switches. 


Multicast 

recipient 


O  Desktop  PCs  send  multicast 

MAC  registration  information  O  The  switch  registers  the  client  and  sets  a  multicast 

to  a  Layer  2  switch  via  GMRP.  address  filter  on  the  client  ports.  The  switch  may 

— -  also  use  GMRP  to  propagate  a  client's  multicast 

request  to  other  switches. 


Filter  settings 

HI  Port  1  =  Standard 
Port  2  =  Multicast 
Port  3  =  Multicast 


IP  Multicast  packets  from  a  video  server  are  mapped 
to  multicast  MAC  addresses  by  Layer  3  switches  and 
routers,  and  then  sent  via  filtered  Layer  2  switch 
ports  to  desktop  PCs.  The  use  of  GMRP  prevents 
Layer  2  switches  from  having  to  flood  all  clients  with 
multicast  packets. 


For  many  net  executives,  GMRP  could 
not  have  come  at  a  better  time.  In¬ 
creasingly,  users  are  employing  multicast¬ 
ing  for  multimedia  applications,  and  large 
multimedia  files  are  placing  heavy  bur¬ 
dens  on  IP-level  multicasting  operations. 

With  Layer  3  multicasting,  PCs,  servers 
or  other  potential  multicast  receivers 
use  the  standard  Internet  Group 
Management  Protocol  (IGMP)  to  register 
with  their  routers  in  order  to  receive  IP 
Multicast  packets.  To  exchange  IP 
Multicast  group  membership  informa¬ 
tion,  the  routers  use  several  multicast 
routing  protocols  to  build  tree  tables 
that  point  from  multicast  sources  to 
their  receivers. 

A  source  can  then  transmit  a  single 
copy  of  the  IP  Multicast  packet,  after 
which  additional  packets  are  replicated  at 
delivery-tree  forks  they  encounter  in 
Layer  3  switches  and  routers  along  the 


As  a  solution,  the  IEEE  last  year  includ¬ 
ed  a  definition  for  GMRP  with  the 
802.1p/Q  specification.  Essentially,  GMRP 
enables  client  PCs  and  workstations  to 
register  for  multicast  membership  with 
Layer  2  switches,  in  much  the  same  way 
as  they  register,  via  IGMP,  with  Layer  3 
switches  and  routers. 

The  difference  is  that  PCs  and  work¬ 
stations  are  registering  Layer  2  multicast 
media  access  control  (MAC)  addresses. 
And  while  their  Layer  3  multicast  regis¬ 
tration  travels  to  the  routers  via  IGMP, 
their  Layer  2  MAC  registration  is  carried 
by  GMRP.  The  latter  carries  this  informa¬ 
tion  in  a  variable-length  GARP  protocol 
data  unit  (PDU)  within  the  Ethernet 
packet.  As  a  GARP  application,  GMRP 
relies  on  GARP’s  transport-level  protocol 
services. 

The  PDU  header  includes  the  source 
MAC  address  of  the  client  PC  and  a  desti- 


a  well-defined  multicast  address,  the 
packet  can  be  identified  as  protocol 
information  and  placed  in  a  separate 
queue  from  data  packets,  where  it  might 
receive  a  higher  or  lower  priority  than 
data,  depending  on  the  specific  multicast 
application.  Also,  multiple  join/leave 
requests  for  multiple  multicast  MAC 
addresses  may  be  carried  in  a  single 
GMRP  packet,  which  adds  to  overall  net¬ 
work  bandwidth  efficiency. 

To  make  use  of  GMRP,  network  execu¬ 
tives  will  need  to  specify  GMRP  support 

—  or, for  that  matter.  802. 1 1>  1 998  support 

—  in  their  Layer  2  switches  and  the  net¬ 
work  interface  cards  of  PCs  and  servers. 

Jain  is  a  consulting  architect  for 
3Com,  and  Karimi  is  a  technology 
marketing  manager  for  3Com.  They 
can  be  reached  at  vipin@crnetric.com 
and  Harnid_Kanmi@3Com.com. 
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Technology  Update 


Gearhead  —  inside  the  network  machine  .  Mark  Gibbs 

Rebol  with  a  context 


A  few  weeks  ago,  Gearhead  took 
a  look  at  a  cool  language 
called  Python  (NW,  June  14,  page  44). 
It  seems  from  your  comments  that  lan¬ 
guages  are  a  hot  topic,  particularly  lan¬ 
guages  that  are  good  for  quick  fixes. 

Gearhead  now  offers  up  another 
language  for  your  consideration: 
Rebol,  a  free  interpreted  scripting  lan¬ 
guage  from  Rebol  Technologies. 

Rebol  (pronounced  “rebel”)  is  a 
remarkable  language:  It  is  small  (the 
run-time  interpreter  is  a  skinny  159K 
bytes  under  Windows),  pretty  fast, 
easy  to  learn,  sophisticated,  amazingly 
powerful  and  available  on  —  get  this 
— 17  operating  systems  covering  32 
combinations  of  operating  systems 
and  hardware! 

This  support  makes  Rebol  the  most 
widely  available  cross-platform  lan¬ 
guage,  including  all  flavors  of  Win¬ 
dows,  BSD  variants,  Linux,  OS/400, 
AIX,  Macintosh,  Solaris  and  PalmOS. 
Fifteen  more  platforms  are  pending, 
but  not  NetWare  —  all  you  NetWare 
devotees  should  hassle  the  company 
immediately. 

Even  more  amazing  is  that  Rebol 
Technologies  claims  applications  are 
completely  portable  between  plat¬ 


forms  without  modification.  Gearhead 
talked  with  Carl  Sassenrath,  Rebol’s 
creator  and  the  company’s  founder 
and  CEO,  about  the  language  and  the 
company’s  plans. 

Sassenrath  is  excited  about  Rebol’s 
market  and  is  adamant  that  Rebol 
Technologies  is  in  it  for  the  long  haul 
to  build  a  strong  market  and  company. 

Rebol  is  the  result  of  Sassenrath’s  20 
years  of  language  experience  with  the 
likes  of  Hewlett-Packard.The  language 
is  designed,  he  says,  for  “programming 
in  the  small”  —  giving  programmers 
the  ability  to  hack  effective  tools  as 
easily  as  possible. 

Although  Sassenrath  hasn’t  made 
the  source  of  the  Rebol  interpreter 
available,  he  points  out  that  every 
other  aspect  of  the  language  is  open. 


This  is  part  of  the  company’s  strat¬ 
egy  to  create  an  environment  in 
which  developers  will  share  code  and 
information  and  create  a  market  buzz 
that  popularizes  the  language.  Indeed, 
the  company  has  no  immediate  plans 
to  produce  a  compiler  that  would 
allow  developers  to  hide  their  coding. 

When  you  download  Rebol,  you’ll 
find  the  run-time  executable  and  a 
handful  of  scripts  and  documentation 
in  an  archive.  The  documentation  is 
sparse  (Sassenrath  admits:  “The  docu¬ 
mentation  is  horrible  and  I  apologize 
profusely  .  .  .  we’re  rewriting  it.”), 
but  there  is  more  than  enough  to 
get  you  started.  And  the  Rebol  Web 
site  has  some  good  tutorial  material. 
The  site  also  features  a  collection  of 
scripts  written  by  Rebol  users  and 
the  company  that  will  help  get 
you  going. 

The  company  describes  Rebol  as 
“The  Internet  Messaging  Language,” 
which  only  begins  to  cover  the  scope 
of  what  it  can  do.  There’s  built-in  sup¬ 
port  for  HTTP,  FTP,  SMTP  POP,  NNTP, 
Finger  and  daytime  protocols,  and 
there’s  support  for  adding  any  TCP 
protocol  required  (although  that  doc¬ 
umentation  is  missing  at  present). 


There’s  a  security  model  to  control 
the  level  of  access  Rebol  scripts  have 
to  the  local  file  system  and  TCP  sock¬ 
ets,  and  a  rich  set  of  data  types,  includ¬ 
ing  URLs,  money,  times,  dates,  num¬ 
bers,  strings,  words  and  lists. 

So  what  is  Rebol  like  to  program 
with?  Well,  pretty  amazing,  as  it  offers 
simple  constructs  for  doing  complex 
things.  For  example: 

print  read  http://www.nwfusion. 
com/columnists/gearhead.html 

This  script  reads  the  given  URL  and 
prints  its  contents.  Want  to  send  the 
URL  contents  to  someone?  Try: 
send  you@yourdomain.com  read 
http  ://www.  nwfusion .  com/colum 
nists/gearhead.html/ 

How  about  running  a  Rebol  script 
that’s  on  an  FTP  server?  Voila! 
do  ftp://ftp.site.eom/scripts/test.r 
Rebol  can  also  be  extended  with 
“dialects”  —  sort  of  like  defining  func¬ 
tions  that  become  part  of  the  lan¬ 
guage.  This  allows  you  to  write  code 
that  is  context-specific.  This  is  another 
area  in  which  documentation  is 
sparse,  but  the  concept  is  exciting. 

Check  out  Rebol  and  tell  Gearhead 
your  thoughts  at  gh@gibbs.com. 


News,  tips  and 
tools  from  our 
Web  site 


hardware  over  software  or 
router-based  systems. 
DocFinder:  3832 


It’d  be  difficult  to  run  a 
large  Web  site  without  some 
type  of  load  balancing.  But 
what  kind?  In  this  week’s 
Foo’  Bar,  Motley  Fool  techni¬ 
cal  guru  Dwight  Gibbs  dis¬ 
cusses  load  balancing  and  the 
Fool’s  experience  with  F5’s 
Big/IP  hardware-based  load 
balancer.  The  Fool  originally 
settled  on  a  hardware  answer 
because  that’s  all  there  was, 
but  Gibbs  says  there  are 
sound  reasons  to  stick  with 


Help  Desk 

This  week,  Ron  Nutter 
helps  a  reader  who  can’t 
seem  to  get  Remote  Access 
Server  to  work  on  a  couple  of 
NT  workstations.  The  work¬ 
stations  keep  telling  him  they 
don't  have  enough  server 
storage,  even  though  one  box 
has  at  least  1G  byte  of  free 
space.  See  what  Nutter  rec¬ 
ommends  —  and  tell  us  if 


you  have  an  alternate  answer. 

DocFinder:  3830 

Server  name  Bake-off 

There  are  some  creative 
people  out  there  vying  for 
that  Dell  PowerEdge  1300 
server  we  and  Dell  are  giving 
away.  From  a  backup  server 
named  Bamboo  (because 
backup  products  are  often 
torture  to  run)  to  a  corporate 
firewall  called  Sphincter, 
entries  in  our  “You  named  it 
what?”  contest  are  flooding 
in.  See  what  others  have 
named  their  servers,  and  sub¬ 
mit  your  server  names  (and 
the  stories  behind  them)  by  5 
p.m.  EDT,  Monday,  July  26,  and 
you  could  win  that  Dell  serv¬ 
er  (or  $2,000  toward  the  pur¬ 
chase  of  any  other  Dell  box). 

DocFinder:  3  732 

Downloads  of  the  week 

Sun  and  IBM  have  recently 
released  advanced  develop¬ 
ment  tools  for  streaming 
audio  and  video  to  Java- 


enabled  browsers.  Sun’s  Java 
Media  Framework  2.0,  now 
in  beta,  is  a  set  of  APIs  co¬ 
developed  with  IBM.  IBM’s 
HotMedia  2.0  tool  kit  lets 
users  build  applications  with 
media  types  such  as  stream¬ 
ing  video,  3-D  graphics  and 
panoramic  360-degree  vistas. 
Download  these  and  other 
Java  tools  from: 

DocFinder:  3835 

User  Excellence 

Each  year,  Network  World 
honors  enterprises  that  make 
innovative  and  effective  use 
of  network  technology.  Nom¬ 
inations  are  now  open  for  the 
1999  awards.  Winners  will  be 
profiled  in  Network  World's 
Signature  Series  Best  Issue  on 
Nov.  15,  and  honored  early 
next  year  at  an  awards  cere¬ 
mony  at  ComNet  in  Washing¬ 
ton,  D.C.  You  can  apply 
online,  of  course,  or  send  us 
an  e-mail  with  your  entry.  Full 
details  at: 

DocFinder:  3737 


BackOrifice  reaction 

Some  users  reacted  strongly 
to  the  recent  release  of  Back- 
Orifice  2000,  a  client/server 
tool  that  can  be  used  to  moni¬ 
tor  and  control  the  Windows- 
based  clients  or  servers  of  un¬ 
witting  users. 

Some  ask  why  anybody 
would  release  such  a  thing. 
Others  say  its  authors  are 
doing  us  a  favor  by  highlight¬ 
ing  security  holes. 

What  do  you  think?  Read 
our  coverage,  then  jump  into 
our  forum. 

DocFinder:  3834 


Ron  Nutter  is  standing 
by  to  answer  your  net¬ 
work  questions.  Read  hi; 
column  every  week  on 
Fusion.|| 
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With  over  85,000  installations,  chances  are 
Check  Point  has  solved  it  already. 


No  matter  what  challengesyou  face  in  build¬ 
ing  a  secure  enterprise  network,  we  have  a 
full  range  of  solutions.  Real  solutions.  Right 
now.  For  everything  from  network  security 
to  traffic  control  and  IP  address  manage¬ 
ment.  All  based  on  a  common  architecture 
for  integrated  policy  management.  Which 
means  you  can  implement  corporate 
policies,  deploy  them  across  your  extended 
enterprise,  and  control  them  from  a 
central  point. 

Because  of  our  superior  technology,  Check 
Point  is  the  worldwide  market  leader  in  both 
firewall  and  VPN  implementations.  And  our 
Open  Platform  for  Secure  Enterprise 

CHECK  POINT  SOFTWARE  TECHNOLOGIES  LTD.  Check  Point, 
registered  trademarks  of  Check  Point  Software  Technologies  Ltd. 

Free  Product  ii 


Connectivity  (OPSEC)  is  the  de  facto  indus¬ 
try  standard  for  seamless  integration  and 
management  of  200+  third-party  security 
products.  Which  lets  you  choose 
the  best  solutions  foryour  network. 

Check  Point  solutions  are  backed  by  an  experi¬ 
enced  professional  services  group  and  24x7 
worldwide  customer  support.  And  with  more 
than  a  thousand  channel  partners  worldwide 
there  is  a  local  point  of  contact  whereveryou  are 

Be  sure  your  network  is  secure— Check  out 
our  new  white  paper  “Top  Ten  Chal¬ 
lenges  to  Securing  Your  Network”  at: 

www.checkpoint.com/topten 

the  Check  Point  logo  and  OPSEC  are  trademarks  or 

lfo  enter  NWInfoXpress  #33  online  @  www.netwoi 


■  Network  Security 

■  Traffic  Control 

■  IP  Address  Management 

■  OPSEC  Alliance 

■  Integrated  Policy  Management 

Check  Point 


Soft  wan:  Technologies  Ltd. 
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pinions 


Editorial  insights 

A  challenge  to  the 
purveyors  of  convergence 

A  few  weeks  back,  I  wrote  about  Net¬ 
work  World’s  upcoming  Conver¬ 
gence  Showdown  at  NetWorld+ 
lnterop  in  Atlanta.  At  the  time,  I 
asked  whether  I  should  challenge  the  enter¬ 
prise  equipment  makers,  service  providers  or 
both  to  explain  why  they’re 
pushing  the  concept  of  con¬ 
vergence  and,  more  impor¬ 
tant,  what’s  in  it  for  readers. 

The  consensus  among  read¬ 
ers  was  that  they  most  want 
to  hear  from  the  enterprise 
equipment  makers.  So  I’m 
challenging  3Com,  Cable¬ 
tron,  Cisco,  Lucent  and  Nortel 
Networks  to  send  a  top  tech¬ 
nical  executive  to  stand 
before  the  audience  in  our 
Convergence  Showdown,  which  will  be  held 
from  12:30  p.m.  to  2  p.m.  on  Tuesday,  Sept.  14, 
in  Ballroom  I  of  the  Georgia  World  Congress 
Center.  The  vendors  will  have  until  Monday, 

Aug.  9,  to  confirm  their  participation.  If  one 
fails  to  rise  to  the  challenge,  we  ll  fill  that  ven¬ 
dor’s  slot  with  another  player. 

During  this  special,  presidential-style  debate, 
the  equipment  makers  will  face  questioning 
from  the  audience,  a  panel  of  industry  experts 
and  each  other.  Our  experts  panel  is  expected 
to  include  Jim  Duffy,  senior  editor  with  Network 
World ;  Kevin  ToUy,  president  of  The  Tolly  Group 
consultancy;  and  Jim  Metzler,  a  principal  of 
Ashton,  Metzler  and  Associates. 

These  folks  will  try  to  get  past  all  the  market¬ 
ing  hype  about  convergence  and  get  answers  to 
the  tough  questions  our  readers  have,  such  as: 
Which  applications  really  require  a  converged 
network,  and  why  can’t  I  support  them  just  by 
throwing  more  bandwidth  at  them?  What  orga¬ 
nizational  changes  will  I  have  to  make  to  sup¬ 
port  a  converged  network?  What  kind  of  cost 
savings  can  I  really  expect?  What  level  of  invest¬ 
ment  will  be  required  to  get  those  savings? 

The  showdown  format,  with  its  strict  ban 
on  PowerPoint  presentations  and  prepared 
remarks,  puts  a  premium  on  candor  and  clari¬ 
ty'.  It  helps  attendees  walk  away  with  a  better 
idea  of  the  real  issues  shaping  convergence. 

1  usually  have  up  to  six  vendors  in  a  show¬ 
down,  but  I’ve  left  a  slot  open  for  you  to  help 
me  fill.  Is  there  another  major  player  or  start-up 
you’d  like  to  see  included? 

Also,  tell  me  what  you  want  our  experts  to 
ask  these  folks.  E-mail  me  your  power  questions, 
and  mark  the  time  and  date  on  your  calendar. 

But  for  now  —  3Com,  Cabletron,  Cisco, 
Lucent  and  Nortel  —  are  you  up  to  the 
Convergence  Showdown  challenge? 

—  John  Gallant 
jgaUant@n  u  m>.  com 


E-mail  statistics  seem 

OVERINFLATED 

In  his  June  14  “  ’Net  Buzz”  column  (page  74), 
Paul  McNamara  mentions  a  survey  that  re¬ 
ports  we  U.S.  workers  receive  an  average  of 
200  e-mails  per  day.  I  agree  with  McNamara 
that  the  number  is  a  crock. 


My  company  has  internal  e-mail  for  all 
employees,  and  many  of  our  employees  also  have 
Internet  e-mail.  I  took  a  quick  unscientific  survey 
of  some  of  our  employees  and  found  that  the  aver¬ 
age  is  less  than  20  e-mails  per  day,  including  inter¬ 
nal  and  external  e-mails. 

I  just  don’t  see  how  anyone  could  get  any  work 
done  with  200  daily  e-mails  to  deal  with.  I  found 
that  I  actually  receive  more  e-mail  than  almost  any¬ 
one  in  my  company,  and  I  average  less  than  30  per 
day,  including  e-mail  newsletters  and  the  like. 

I  would  estimate  that  I  spend  an  average  of 
about  1  minute  per  e-mail. That  means  if  I  were  get¬ 
ting  200  per  day,  I  would  spend  nearly  half  of  my 
working  day  just  taking  care  of  e-mail.  If  someone 
out  there  has  that  much  spare  time  on  his  hands,  I 
want  to  hear  about  it  because  I’m  in  the  wrong 
occupation. 

Charles  Harrington 
Elkton,  Md. 

Responsible  anonymity 

Regarding  Mark  Gibbs’  column  “Responsible 
anonymity  and  John  Doe”  (June  28,  page  82): 

I  have  seen  many  postings  on  Yahoo  that 
were  slanderous  or  even  murderous  in  intent. 

At  one  time,  someone  was  posting  death  threats 
on  the  investors  forums  for  some  of  the  tele¬ 
phone  companies. 

I  sent  a  request  to  Yahoo  to  remove  the  messages 
and  monitor  the  forum  as  it  claims  to  do.  I  asked  if 
the  company  had  read  its  own  terms  of  service  and 
why  it  didn’t  apply  them. 

In  most  cases,  I  don’t  think  ISPs  want  to  be 
responsible,  and  they  write  terms  of  service  only  as 
a  legal  defense,  not  an  actual  enforced  policy. 


Privacy  is  a  great  excuse  for  ISPs  not  to  have 
to  be  responsible  for  anything. 

Anonymity  is  a  great  thing,  and  people 
should  be  given  as  much  freedom  as  possible. 
However,  there  is  no  reason  why  actions  that 
would  be  illegal  in  any  other  forum  should  be 
allowed  on  the  Web. 

If  we  allow  court-ordered  phone  taps,  then 
court  orders  should  produce  e-mail  addresses  as 
well.  According  to  Yahoo’s  terms  of  service, 
Xircom  and  Yahoo  have  legitimate  grievances 
against  John  Doe  (http://docs.yahoo.com/info/ 
terms). 

Greg  Baugh 
Niceville,  Fla. 

Free  speech  does,  and  should,  have  a  price.  A  large 
component  of  that  price  is  responsibility. 

An  individual  cannot  expect  to  say  something 
and  not  cause  varying  reactions.  He  must  take 
responsibility  for  his  actions  and  be  prepared  for 
others’. 

I  am  a  believer  in  free  speech,  and  I  believe  that 
anonymity  is  important  and  should  be  guaranteed. 
On  the  Internet,  when  I  write  something  (post  a 
message  to  a  newsgroup,  write  an  e-mail,  send  a 
fax),  I  sign  it.  When  I  read  something,  I  expect  my 
identity  to  be  protected. 

I  do  not  believe  that  John  Doe  should  be  pro¬ 
tected.  Information  without  its  source  clearly 
identified  is  only  fiction. 

While  fiction  is  not  to  be  used  as  factual  infor¬ 
mation,  it  is  sometimes  difficult  to  differentiate 
rumor  from  fact. Therefore,  I  can  understand 
Xircom’s  motives. 

On  the  other  hand,  if  John  Doe  wants  to  check 
out  the  nudie  bit  map  sites,  that  is  his  business.  I 
do  not  believe  anyone  should  know  his  surfing 
habits,  what  he’s  buying  or  any  kind  of  informa¬ 
tion-gathering  (reading)  he  is  doing.  Only  when  he 
posts  (writes)  information  is  he  responsible  for 
providing  his  identification. 

This  is  not  a  tough  issue.  When  you  write  some¬ 
thing,  let  the  receiver  know  the  intended  use.  If 
all  else  fails,  don’t  do  it  if  you  aren’t  prepared  for 
the  worst. 

Kevin  Quinn 
San  Diego 


Send  letters  to  nwnews@nww.com  or  John 
Gallant,  editorial  director.  Network  World, 
161  Worcester  Road,  Framingham,  MA 
01 701.  Please  include  phone  number  and 
address  for  verification. 


More 

Online 

m 


•  More  letters  about 
responsible  anonymity. 
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Management  Mode  .  Jeff  Shapiro 

The  Linux  jihad  runs  on  emotion  more  than  reason 


In  a  previous  column  I  opined  that  Microsoft’s 
Windows  2000  was  going  to  be  the  desktop 
operating  system  of  choice  for  the  corporate 
enterprise. The  reactions  from  readers  were  swift 
and  candid.  Most  of  you  agreed  with  my  reason¬ 
ing  and  conclusions,  a  few  branded  me  a  stooge 
for  Microsoft  and  a  few  more  saw  fit  to  attack  my 
impartiality,  professional  background  and  character. 

No,  this  isn’t  a  whiny,“Why  don’t  you  like  me?” 
story.  I’ve  been  a  columnist  for  various  magazines 
for  eight  years,  and  my  skin’s  grown  pretty  thick. 
Besides,  it’s  hard  to  take  a  dissection  of  one’s  charac¬ 
ter  seriously  when  half  the  words  are  misspelled. 

While  studying  content  I  also  took  a  close  look  at 
the  sentiments  and  attitudes  of  the  senders,  and  one 
thing  became  clear  very  quickly:  The  nastiest  mis¬ 
sives  with  the  lowest  character  aspersions  came 
almost  exclusively  from  Linux  advocates. 

These  folks  seem  to  be  uniformly  convinced  of 
three  things:  one,  that  Linux  is  not  just  the  best 
operating  system,  it  is  the  only  operating  system; 
two,  that  Bill  Gates  is  the  devil  incarnate,  and  any¬ 


one  who  approves  of  him,  Microsoft  or  its  prod¬ 
ucts  is  automatically  one  of  his  minions;  and  three, 
that  there  is  a  global  conspiracy  to  crush  Linux  and 
silence  its  advocates.  In  essence,  anyone  who 
speaks  ill  of  Linux  in  any  context  and  under  any 
circumstances  is  a  Redmondian  demi-demon  or  an 
infidel  and,  therefore,  may  have  his  character  assas¬ 
sinated  at  will. 

What  amuses  me  about  this  attack  is  that  I  like 
Linux.  I  use  it  fairly  extensively  in  my  server  opera¬ 
tions,  especially  with  Internet-connected  devices.  I 
don’t  use  it  on  the  corporate  desktop.  Why?  Because 
Linux  is  overcomplex  and  undersupported,  and 
applications  of  a  professional  quality  aren’t  readily 
available. 

I’ve  already  spilled  significant  ink  discussing  these 
problems,  so  I  won’t  rehash  them  here.  I  will  say, 
however,  that  the  marketplace  is  making  significant 
progress  toward  resolving  these  issues,  and  Linux 
may  very  well  be  a  viable  desktop  environment  in  a 
year  or  two. 

The  fact  that  I  don’t  believe  that  Linux  is  the  be¬ 


all,  do-all  and  end-all  product  for  all  computers 
everywhere  right  now  seems  to  make  me  and  my 
like-minded  colleagues  targets  of  scorn.  But  interest¬ 
ingly,  in  the  volume  of  e-mail  I  received,  there  was 
not  a  single  cohesive,  well-reasoned  attempt  to 
sway  me  with  logic.  Just  one  ad  hominem  attack 
after  another,  of  the  “You  don’t  agree  with  me, 
therefore  you  are  wrong  and  everything  you  say,  do 
and  think  is  evil”  variety. 

This  stridency  and  “us  vs.  you”  attitude  are  doing 
more  to  damage  Linux’s  widespread  acceptance 
than  enhancing  it.  Reason  will  make  more  converts 
than  the  sword.  If  you  can,  come  up  with  cost, 
return  on  investment  and  benefit-based  rationales, 
and  I’ll  listen  to  you  as  closely  and  as  open-mindedly 
as  most  of  you  listen  to  me. 

As  I  said  earlier,  it’s  hard  to  take  vitriol  seriously. 
Let’s  keep  this  a  dialog,  not  a  diatribe. 

Shapiro  is  district  technology  coordinator  for 
Kingsport  City  Schools  in  Kingsport,  Tenn.He  can  be 
reached  at  jshapiro@kpt.kl2.tn.us. 
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Qwest  and  US  West  have  their  roles  reversed 


So  Qwest  is  going  to  buy  US  West  .  . .  maybe. 
Or  maybe  it’s  buying  US  West  and  Frontier. 

Or  maybe  Global  Crossing  is  buying  US  West 
and  Frontier,  or  maybe  it’s  buying  only 
Frontier.  It’s  enough  to  give  you  a  headache, 
especially  considering  it’s  US  West  that 
should  be  doing  the  buying. 

Qwest’s  fundamental  business  proposition 
involves  using  IP  technology  to  build  a  long-haul 

network  so  economical 
that  service  costs  will  be 
far  lower  than  those  of 
incumbent  interexchange 
carriers  such  as  AT&T,  MCI 
and  Sprint. This  will  let 
Qwest  discount  its  services 
sharply,  win  over  its  com¬ 
petitors’  customers  and  still 
earn  tons  of  money.  In  a  recent  Network  World  arti¬ 
cle,  Qwest  competitor  Level  3  likewise  talked 
about  dropping  voice  prices  radically  and  regularly. 

But  let’s  take  a  closer  look  at  this  scenario.  Long- 
haul  bits  are  getting  really  inexpensive,  right?  In 
fact,  IP  fans  keep  telling  us  that  “bandwidth  is  free.” 
Qwest,  therefore,  is  in  the  business  of  selling  some¬ 
thing  that’s  cheap  today  and  will  be  free  tomorrow 
—  at  least  if  you  believe  classical  wisdom. 

Forgive  me,  but  the  business  model  that  lets 
you  make  a  profit  selling  something  that’s  free 
escapes  me. 

Yet  strange  as  such  a  business  model  may  be,  it 
does  explain  why  Qwest  would  want  to  buy  US 
West.  Nobody,  after  all,  is  proposing  that  access  is 
going  to  be  free.  In  fact,  one  might  well  conclude 
that  customer  access  will  be  the  key  competitive 


asset  among  service  providers.  After  all,  that  free 
bandwidth  has  to  be  delivered  by  someone.  Wire¬ 
less  providers  may  propose  their  technologies  as 
alternatives  to  the  copper  loop,  but  with  about  170 
million  copper  loops  in  the  ground  today,  the  loop 
owners  are  reaching  a  lot  of  customers  at  a  very 
low  cost. 

This,  of  course,  raises  the  question  of  whether 
the  roles  of  seller  and  buyer  have  been  somehow 
reversed  in  the  Qwest-US  West  deal.  If  Qwest  is 
looking  at  steadily  declining  bandwidth  costs, 
reducing  them  at  some  point  to  essentially  zero, 
where  is  it  getting  the  money?  Why  isn’t  US  West, 
whose  customer-access  assets  should  be  getting 
more  valuable  as  competition  heats  up,  buying 
Qwest  instead? 

Some  see  a  plausible  answer  in  the  regulatory 
situation. The  telecom  act  is  supposed  to  keep  the 
regional  Bell  operating  companies  out  of  the  long¬ 
distance  market  until  they’ve  complied  with  1 4 
proof  points  in  opening  their  own  local  exchange 
markets  to  competition. 

But  close  examination  of  the  act  shows  that 
RBOCs  can  get  into  the  long-distance  business 
immediately,  except  in  their  home  regions.  US  West 
could  be  selling  long-distance  services  today,  so 
why  not  just  buy  Qwest? 

The  answer  may  lie  in  Wall  Street’s  unrealistic 
view  of  our  industry.  A  company  can  acquire 
another  company  most  easily  if  the  buyer  has  a 
high  total  stock  value  —  the  “market  capitaliza¬ 
tion,”  or  market  cap.  A  high  market  cap  in  the  tech¬ 
nology  sector  isn’t  based  on  earnings  (which  US 
West  has),  but  on  the  assumption  that  a  lot  of 
stock  purchasers  will  believe  the  company  will 


have  better  earnings  in  the  future.  Real  earnings  in 
the  present  can  just  get  in  the  way  of  a  rosy  set  of 
expectations,  and  that  can  really  contaminate  not 
only  company  valuations,  but  also  our  whole 
industry. 

Let’s  look  at  the  statistics  for  a  moment.  Qwest 
isn’t  ranked  on  the  Fortune  500.  Its  latest  quarter  rev¬ 
enue  was  about  $880  million.  US  West  is  135th  on 
the  Fortune  list  for  1999,  earning  $3  2  billion  in  the 
latest  quarter.  Cisco  is  192nd  on  the  list  and  earned 
$3.1  billion  in  the  last  quarter.  So  why  doesn’t  Qwest 
buy  Cisco  instead?  Because  Cisco’s  market  cap  is  10 
times  that  of  Qwest  ($206  billion  to  Qwest’s  $23  bil¬ 
lion),  while  Qwest  nearly  matches  US  West’s  $29  bil¬ 
lion  capitalization. 

Obviously,  Cisco’s  future  is  best,  Qwest’s  is  sec¬ 
ond  and  poor  US  West’s  is  last,  based  on  the  rela¬ 
tionship  between  earnings  and  Wall  Street’s 
assigned  value. 

Or  is  it?  Could  it  be  that  this  whole  high-tech 
valuation  process  is  nothing  but  a  big  fraud?  Is  it 
possible  that  hype  sets  the  values  of  companies, 
and  this  hype  is  thus  controlling  the  business  of 
telecommunications?  Sales  sets  earnings,  hype  sets 
market  cap. 

What  kind  of  industry  will  we  have  if  the  most 
successful  line  of  ...well,  hype,  rather  than  the 
most  successful  line  of  business,  wins  out? 

We’d  be  better  off  if  Qwest’s  and  US  West’s  roles 
were  reversed.  We’d  be  better  off  in  an  industry 
that  could  reverse  them. 

Nolle  is  president  of  CIMI  Corp.,  a  technology 
assessment  firm  in  Voorhees,  NJ.  He  can  be  reached 
at  (856)  753-0004  or  tnolle@citnicorp.com. 
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Buyer's  Guide 


BY  JOEL  SNYDER 

Five  years  ago,  all  firewall  prod¬ 
ucts  looked  pretty  much  the 
same  —  a  combination  of 
packet  filtering  and  TCP  prox¬ 
ies  running  on  a  Unix  system. 
We  predicted  then  that  the 
firewall  market  would  shake 
out.Too  many  vendors  and 
too  little  differentiation,  we 
observed.  We  were  half  right. 
In  fact,  the  number  of  play¬ 
ers  has  grown,  although  the  names  of 
the  players  have  changed.  Our  inter¬ 
active  Buyer’s  Guide  contains  prod¬ 
uct  specifications  for  52  products 
from  33  vendors  (www.nwfusion. 
com,  DocFinder:  3822). 

Meanwhile,  vendors  have  worked 
hard  to  differentiate  themselves  and 
their  products  by  aiming  at  every 
conceivable  niche. As  a  result,  ven¬ 
dors  have  made  it  easier  to  manage 
firewalls  while  improving  security 
where  it’s  needed  most:  in  Web  ser¬ 
vices  and  e-mail.  Five  main  trends 
have  driven  this  change  and  continue 
to  shape  the  direction  of  the  firewall 
market: 

•  Firewall  appliances  are  finding 
their  place  in  branch-office  environ¬ 
ments. 

•  Configuration  continues  to  get 
easier  and  more  error-proof. 

•  E-mail  and  Web-browsing  func¬ 
tions  dominate  Internet  traffic. 

•  New  virus  and  content-scanning 
features  are  showing  up  in  firewall 
feature  sets. 

•  Vendors  are  building  in  defensive 


/Vew  products,  innovative  features  are 
keeping  more  networks  safe  from  intruders. 
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maneuvers  to  protect  against  denial-of-ser- 
vice  attacks. 

One  of  the  most  tangible  changes  is  the 
move  from  firewall  hosts  to  firewall  appli¬ 
ances.  Originally,  the  only  acceptable  firewall 
was  a  Unix  workstation  or  server  with  two  or 
more  LAN  connections  straddling  the  secure 
and  insecure  networks.  As  a  general-purpose 
system,  the  firewall  managed  traffic  across  net¬ 
works,  and  also  provided  network  services  of 
its  own:  Domain  Name  System  (DNS),  File 
Transfer  Protocol  (FTP),  Web-browsing,  e-mail 
and  Network  News  Transport  Protocol 
(NNTP). 

Today,  few  firewalls  support  network  ser¬ 
vices  (DNS  is  a  notable  exception),  and  ven¬ 
dors  generally  discourage  users  from  running 
services  on  the  firewall  itself. This  advice 
comes  from  a  combination  of  hard-learned 
lessons  and  common  sense.  Firewall  man¬ 
agers  have  learned  that  the  more  software  on 
the  firewall,  the  greater  the  likelihood  of  an 
exploitable  security  flaw. They’ve  also  come 
to  realize  that  every  time  someone  touches 
the  firewall’s  configuration,  even  if  it’s  just  to 
adjust  an  FIT  server,  the  possibility  of  intro¬ 
ducing  configuration  errors  exists. 

Because  costs  for  computing  hardware 
have  dropped  so  dramatically,  putting  in  addi¬ 
tional  systems  to  handle  Internet-based  ser¬ 
vices,  such  as  FTP  and  NNTP,  has  become  the 
standard  answer  for  enterprise  nets.  As  a 
result,  the  newest  breed  of  firewalls  are  often 
deemed  appliances:  products  that  require  a 
minimum  of  adjustments  and  tightly  limit  the 
options  available  to  users. 

Some  vendors  have  also  produced  Internet 
appliances  that  not  only  have  firewall  func¬ 
tions  but  also  include  Internet-based  services, 
such  as  mail  and  Web  browsing,  on  a  single 
platform.  (See  our  review  of  firewall  appli- 


InSidB  ^ev’8w:  ^ur  ^ue  R'bbon  Award  winner  is  Axent  Technologies' '  Rapt°r  Firewall,  an  established  product  with  finely  tuned  security  features.  Raptor  topped  five  °ther 


Online 


3Com 

Axent  Technologies 
BorderWare  Technologies 
BullSoft 

Check  Point  Software 

Cisco 

Compaq 


firewalls  in  our  hands-on  tests.  Page  56. 

Interactive  Buyer's  Guide:  Use  our  customizable  tools  to  compare  52  firewall  products  from  33  vendors,  www.nwfusion.com,  DocFinder:  3822. 

Computer  Associates  Global  Technology  Associates  Livermore  Software  Laboratories  Secure  Computing 


CyberGuard 
Elron  Software 
eSoft 
FreeGate 

Galea  Network  Security 
GenNet  Technology 


IBM 

Intel 

Internet  Appliance 
Internet  Devices 
Internet  Dynamics 
LanOptics 


Lucent 

NetScreen  Technologies 
Network  Associates 
Novell 

Progressive  Systems 
Radguard 


Sonic  Systems 
Sun 

Technologic 

WatchGuard  Technologies 


Network  World  July  19,  1999  www.nwfusion.com  53 


Buyer's  Guide 


VENDORS  PROPOSE  FIREWALL  SCENARIOS 


ances,  iVW;' April  19,  page  57). This  niche  market  could 
grow  dramatically  as  the  widespread  availability  of 
high-speed  Internet  access  via  digital  subscriber  lines 
and  cable  modems  makes  it  practical  for  very  small 
businesses  to  host  their  own  Internet  services  locally. 

Vendors  cater  to  less-sophisticated  shops 

Firewall  watchers  like  to  describe  the  deployment 
of  firewall  products  across  the  network  in  terms  of 
waves:  First  were  the  very  early  adopters  who  used 
Digital’s  (now  Compaq)  commercial  product  and 
Trusted  Information  Systems’  (now  Network  Associ¬ 
ates)  free  firewall  tool  kit.Then  came  the  first  wave  of 
commercial  firewalls  from  vendors  such  as  IBM, 
Raptor  (now  Axent  Technologies)  and  Check  Point 
Software.  During  these  times,  most  buyers  were  net¬ 
work  security  experts. 

As  die  security-sawy  companies  filled  their  firewall 
orders,  the  next  wave  came  from  large  organizations 
that  needed  a  firewall  but  didn’t  necessarily  have  the 
expertise  to  understand  the  subde  differences  be¬ 
tween  products.  Check  Point’s  Firewall-1  began  to 
dominate  the  market  at  this  stage  for  one  major  rea¬ 
son:  It  had  an  extremely  easy-to-use  graphical  user 
interface  for  configuration.  A  network  manager  who 
knew  next  to  nothing  about  security  could  whip  out 
a  configuration  in  no  time  and  feel  confident  that 
there  were  no  loose  ends. 

The  fourth  wave  of  firewall  purchases  is  being 
dominated  by  companies  that  want  to  get  on  the 
Internet  but  have  only  the  most  cursory  knowledge 
of  network  security.  At  many  of  these  sites,  the  corpo¬ 
rate  security  policy  is  often  little  more  than  “keep  the 
bad  guys  out.”  To  satisfy  the  needs  of  these  sites,  fire¬ 
wall  vendors  are  going  to  elaborate  lengths  to  simpli¬ 
fy  and  bullet-proof  their  configuration  utilities. 

The  growth  of  the  NT  firewall  market  is  evidence 
of  this  trend.  Windows  NT  provides  an  easy-to-install 
and  easy-to-manage  base. While  NT-based  firewalls 
generally  lag  behind  Unix-based  firewalls  in  perfor¬ 
mance,  the  simplicity  and  easy  availability  of  the  NT 
platform  is  driving  heavy  sales 
of  NT-based  firewalls. 

At  the  same  time,  critical 
applications  that  have  been  diffi¬ 
cult  to  properly  implement  with 
a  firewall  in  place,  such  as  DNS, 
are  getting  much  more  attention 
from  vendors  intent  on  simplify¬ 
ing  operation. 

Streamlining  Internet  traffic 

Although  the  basic  infrastruc¬ 
ture  of  the  Internet  supports 
dozens  of  applications  and  data- 
access  models,  this  diversity  is 
not  exploited  like  it  used  to  be. 

For  example,  five  years  ago,  it 
was  critical  that  a  firewall  prop¬ 
erly  handle  Telnet,  Gopher  and 
Wide-Area  Information  Servers. 

Now  most  companies  don’t  have  any  such  services, 
or  if  they  do,  they  don’t  need  them  for  Internet  con¬ 
nectivity.  Instead,  most  companies 
see  their  Internet  connection  largely  as  a  conduit  for 
e-mail, Web  browsing  and  the  occasional  multimedia 
application. 

Difficult-to-firewall  applications  of  yesteryear,  such 
as  the  X  Window  System  and  Sun’s  Network  File 
System,  have  dropped  off  the  radar  screens  of  net¬ 
work  executives.  In  their  place  firewalls  now  have 
better  support  for  Web  browsing,  including  built-in 
Web  caches  and  the  ability  to  handle  HTTP  over 
Secure  Sockets  Layer. 


ast  month  we  asked  firewall  vendors  to 
respond  to  a  request  for  proposal  (RFP)  pre¬ 
pared  by  The  Tolly  Group. The  RFP  outlines 
the  needs  of  a  fictional  pharmaceutical 
company  that  wants  to  install  firewalls  in 
place  of  outdated  proxy  servers  on  its  three-site 
enterprise  network.  The  company  is  in  the 
process  of  upgrading  Internet  connections  at  its 
central  and  regional  sites  from  fractional  T-l  and 
dualT-1  lines  to  full  T-l  andT-3  lines. 

We  challenged  vendors  to  provide  for  a  3,000- 
user  network  with  high  availability,  fast  perfor¬ 
mance  with  network  address  translation  engaged, 

Proxies  for  applications  such  as  NNTP  and  FTP 
remain  in  most  products,  although  only  the  older  fire¬ 
walls  pay  serious  attention  to  them.  New  firewall 
proxies  generally  have  few  or  no  features  for  control¬ 
ling  how  these  protocols  are  used. 

Application  developers  have  supported  this  trend. 
For  example,  early  versions  of  Progressive  Networks’ 
proprietary  but  widely  used  RealAudio  protocol 
were  notoriously  difficult  to  secure  with  a  firewall; 
newer  versions  have  been  developed  with  security 
and  firewalls  in  mind. 

Web  browsers,  the  now-dominant  interactive 
Internet  application,  come  with  built-in  support  for 
firewall  proxies.  This  makes  complicated  factors  such 
as  NEC’s  SOCKS  protocol,  a  common  component  of 
early  network  firewalls,  unnecessary. 

Active  filtering 

The  simplification  and  streamlining  of  Internet  traf¬ 
fic  has  had  a  second  side  effect:  Network  executives 
are  now  focusing  on  more  things  they  want  to  do 
with  Web  traffic  before  it 
enters  their  networks. 

Firewall  developers  are 
responding  to  this  interest  by 
building  in  much  more  power¬ 
ful  Web  proxies.  For  example, 
most  firewalls  have  built-in 
virus  and  content  scanning,  or 
have  hooks  that  let  you  attach 
virus-  and  content-scanning 
software. 

Virus  scanners  have  been 
popular  for  years.  Content  scan¬ 
ners  are  gaining  in  popularity 
as  pressure  to  monitor  and  con¬ 
trol  employee  access  to  the 
Internet  grows.  Content  scan¬ 
ners  can  not  only  look  for  and 
delete  Java,  Javascript  and 
ActiveX  components,  but  can 
also  block  connections  to  inappropriate  sites.  Many 
firewalls  today  include  support  for  filtering  products, 
such  as  The  Learning  Company’s  Cyber  Patrol,  and 
links  to  third-party  filtering  services  that  maintain  cat¬ 
egorized  lists  of  objectionable  Internet  sites. 

Firewalls  are  also  including  time-of-day  restrictions 
in  their  Web  proxies  to  allow  off-hours  surfing  and 
logging  and  reporting  on  surfing  activities. 

While  firewalls  have  done  a  good  job  keeping  the 
bad  guys  out,  the  vulnerabilities  built  into  the  TCP/IP 
protocol  suite  have  opened  up  the  Internet  to  denial- 
of-service  attacks.  In  a  denial-of-service  attack,  the 
attacker  tries  to  saturate  the  corporate  Internet  con- 


customized  security  features,  centralized  policy 
management,  and  reporting  and  alerting  features. 
Twelve  vendors  accepted  our  challenge. 

To  find  out  what  our  Buyer’s  Guide  vendors 
recommend,  head  online  to  Network  World 
Fusion’s  RFP  Central. You’ll  find  the  RFP,  network 
diagram  and  detailed  vendor  responses,  including 
the  number  of  Firewalls  required,  configuration 
recommendations  and  pricing.  DocFinder:3823. 

Planning  to  invest  in  intrusion-detection  tools? 
Send  your  RFP  to  sgittlen@nww.com  by  Aug.  16. 

If  yours  is  selected,  we’ll  get  some  advice  for  you 
from  our  upcoming  Buyer’s  Guide  vendors. 

nection  or  crash  the  systems  that  link  to  it  so  the 
Internet  is  unavailable  for  corporate  use. 

As  more  businesses  depend  on  Internet  access  for 
day-to-day  operations,  denial-of-service  attacks  are 
having  a  greater  impact.The  firewall  marketplace  has 
responded  in  turn. 

While  no  firewall  can  prevent  all  denial-of-service 
attacks,  firewall  vendors  have  worked  hard  to  build  in 
as  much  resistance  to  denial-of-service  attacks  as  they 
can.  Simple-minded  attacks,  such  as  sequence  number 
prediction  and  IP  spoofing,  have  been  part  of  the  fire¬ 
wall  toolbox  for  years.  More  complex  denial-of-ser- 
vice  attacks,  such  as  SYN  flooding,  which  can  lock  up 
Web  and  mail  services  so  no  traffic  can  get  in,  call  for 
more  sophisticated  detection  and  avoidance 
schemes,  which  vendors  are  racing  to  deploy.  Many 
times,  this  means  that  firewall  vendors  are  just  one 
step  ahead  of  the  attack  community. 

It  also  means  that  firewall  vendors  are  releasing 
new  versions  more  often  —  and  are  expecting  their 
customers  to  install  them.  Frequent  updates  reinforce 
the  need  for  products  that  can  be  configured  and 
upgraded  by  those  with  little  security  training. 

The  next  generation 

Today,  evaluating  which  firewall  is  right  no  longer 
means  having  to  evaluate  a  dozen  different  look-alike 
products.  Vendors  have  tailored  their  products  to 
meet  very  specific  needs.  By  properly  identifying  your 
required  features,  it’s  easy  to  narrow  the  field  of  po¬ 
tential  products. 

While  simplified  products  address  the  needs  of 
smaller  nets,  more  advanced  firewall  products  are 
concentrating  on  specific  areas,  such  as  Web  proxy 
services,  and  neglecting  areas  that  are  not  main¬ 
stream  enough  to  create  customer  interest.  This  is 
not  opening  a  security  gap  but  is  creating  a  func¬ 
tionality  gap.  Some  features  are  available  only  on 
the  older  and  more  mature  firewalls.  But  these 
older  firewalls  carry  a  larger  code  base  and  have 
not  been  as  swift  in  adding  and  supporting  new 
functions.  This  can  leave  firewall  shoppers  stuck 
deciding  between  two  products:  a  product  with 
new  features  and  an  easy  configuration  interface; 
or  a  feature-rich  product  that  is  more  difficult  to 
configure  and  does  not  have  the  latest  bells  and 
whistles. 

Although  the  presence  of  market  leaders  such  as 
Check  Point  and  Axent  poses  a  formidable  challenge 
to  new  entrants,  there  appear  to  be  plenty  of  vendors 
eager  to  get  in  the  game.The  markets  that  the  leaders 
have  ignored,  such  as  small  businesses,  along  with  the 
continued  explosive  growth  of  the  Internet,  will  keep 
firewalls  a  mobile  and  active  business.  E 


More  Online 

What  do  network  executives  at  a 
Milwaukee  university,  a  Los 
Angeles  publishing  company  and 
a  Santa  Clara  integrated  circuit 
designer  have  in  common?  All 
just  installed  new  firewalls  and 
shared  their  experiences  with  us. 
Check  out  their 
stories  online, 


www.nwfusion.com 
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CONFERENCE  AND  EXHIBITION 

For  the  Enterprise  and  Service  Provider  Markets 
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GEORGIA  WORLD  CONGRESS  CENTER 

Atlanta,  Georgia  I  September  13-17,  1999 


If  the  network  is  the  backbone- 
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guess  that  makes  you  the  brains. 


Don’t  Miss.- 


Feed  your  brain  at  NetWorld+Interop  99  Atlanta 


•  Conferences  on  Networking  and  Service 
Provider  Solutions 

•  One-Day  Programs  on  VPN,  Voice  over  IP, 
Optical  and  Network  Forensics 

•  Over  50  in-depth  Tutorials  and  Workshops 

•  Completely  redesigned  InteropNet  Event 
Network  and  Labs 

•  Solutions  Pavilions  on  Convergence, 
Security,  Linux,  xDSL  and  Web 
Technologies 

•  Exhibits  from  over  500  of  the  world's  lead¬ 
ing  Networking,  Telecommunications  and 
Internet  Technology  suppliers 


When  it  comes  to  providing  infrastructure  solutions,  NetWorld+Interop 
has  always  been  ahead  of  the  curve.  We’ll  help  you  discover  new 
technologies,  implementation  strategies  and  network  management 
ideas  to  support  your  business  transformation  for  tomorrow. 

Find  answers  to  infrastructure  challenges,  such  as  Voice  over  IP, 
Security,  Optical  and  QoS,  as  well  as  Internet  Commerce,  convergence 
strategies  for  data,  voice  and  video  and  the  latest  information  about 
packet  switching. 

If  you  need  answers  today,  there’s  only  one  conference  and  exhibition 
that  gives  you  the  most  up-to-the-minute  information — 
NetWorld+Interop  99  Atlanta. 
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www.interop.com/Atlanta  or  can  1-888-886-4057 


Buyer's  Guide 


WANTED:  SAFETY 
PLUS  SIMPLICITY 
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BY  JOEL  SNYDER,  NETWORK 
WORLD  TEST  ALLIANCE,  AND 
ALLEN  GWINN 

he  six  firewalls  we  tested  act  their  age, 
for  the  most  part. The  seasoned  firewalls 
rely  on  their  finely  tuned  security  fea¬ 
tures  and  a  range  of  built-in  proxy  sup¬ 
port.  The  firewall  rookies  have  narrower 
feature  sets  but  enviably  easy  manage¬ 
ment  tools. 

Our  top  scorer  is  Axent  Technologies’ 
Raptor  Firewall  6.0,  an  established  prod¬ 
uct  in  the  firewall  marketplace.  Raptor’s 
architecture  isn’t  particularly  exciting:  It 
uses  application-level  proxies,  some  packet-filtering 
options  and  a  graphical  management  interface. 
Though  its  performance  could  be  faster,  Raptor  is  an 
excellent  high-end  firewall. 

What’s  striking  about  Raptor  is  the  depth  of  the 
product.  For  example,  implementing  dual  domain 
name  system  (DNS)  servers  is  one  area  in  which 
firewall  vendors  have  done  a  lousy  job  for  years. 
Security  experts  insist  that  keeping  public  and  pri¬ 
vate  DNS  information  separate  is  vital;  firewall  ven¬ 
dors  have  devised  a  variety  of  obscure  and  diffi- 
cult-to-maintain  configurations  to  do  this.  With 
Raptor,  building  dual  DNS  servers  for  a  midsize  site 
is  a  simple  matter,  requiring  only  a  few  clicks  and 
fields  to  fill  in. 


Firewall  veterans  set  the 
bar  for  security  features ; 
newcomers  succeed  by 
making  configuration  easy. 


On  the  down  side,  however,  SonicWall  Pro  limits 
your  ability  to  set  security  policies.  For  example, 
SonicWall  Pro  was  the  only  product  we  tested  that 
could  not  implement  the  demonstration  policy  we 
set  for  the  firewalls  because  it  could  not  finely  con¬ 
trol  outside  users’  access  to  LAN  services.  With 
SonicWall  Pro,  if  you  let  an  Internet  user  in,  then  you 
let  him  in  everywhere. 

Another  firewall  high  on  our  list  of  interesting 
products  is  Internet  Dynamics’  NT-based  Conclave  2. 
The  architecture  Internet  Dynamics  offers  is  beauti¬ 
ful:  You  manage  policy  in  one  place  and  download  it 
into  access  filters  everywhere. 

Policy  managers  act  as  custodians  of  the  security 
policy;  this  is  where  the  administrative  graphical 
user  interface  (GUI)  sits,  along  with  administrative 
tools  such  as  report  writers.  Access  filters  are  the 
gateways  between  resources  and  the  rest  of  the 
world.  Access  filters,  in  theory,  don’t  even  have  to 
be  provided  by  Internet  Dynamics  —  we  could 
imagine  an  IP  router  providing  access  filter  ser- 


NetwodcWorU 


Our  second-place  finisher,  Sonic  Systems’ 
SonicWall  Pro  3.3.1,  is  a  dedicated  hardware  pack¬ 
age  that  uses  stateful  packet  filtering.  Well-suited  for 
branch-office  environments,  it’s  small,  quiet  and  easy 
to  configure  using  a  Web  browser.  Rather  than 
spend  a  lot  of  time  building  proxies  with  little 
added  value,  the  Sonic  folks  have  pushed  for  maxi¬ 
mal  functionality  in  the  few  proxies  they  do  pro¬ 
vide,  which  are  mostly  for  Web  browsing  via  HTTP. 

In  addition,  Sonic’s  dedicated  hardware  turned  in 
excellent  scores  in  our  performance  testing  (for  per¬ 
formance  testing  results,  see  www.nwfusion.com, 
DocFinder:  3825). 


vices,  or  perhaps  a  product  developer  could  add 
code  to  a  database  or  e-mail  server. 

While  you  can  express  complex  policies  very  eas¬ 
ily  in  Conclave,  the  firewall  responsible  for  imple¬ 
menting  those  policies  isn’t  very  sophisticated.  For 
example,  one  of  the  most  basic  features  of  a  File 
Transfer  Protocol  (FTP)  proxy  is  the  ability  to  con¬ 
trol  file  uploads  and  downloads,  a  feature  that 
Conclave  doesn’t  support. 

In  contrast,  Secure  Computing’s  Sidewinder 
Security  Server  4. 1  is  right  out  of  the  old  school. 
Secure  Computing  has  added  access-control  features 
to  an  Intel-based  Unix  platform.  On  top  of  the  hard- 


ScoreCard 

Security  features 
30% 

Configuration 

25% 

Reporting 
and  alerting 
25% 

Installation 

10% 

Documentation 

10% 

Total 

score 

Raptor  Firewall  6.0 

8  x. 30  =  2.40 

7  x. 25  =  1.75 

8  x. 25  =  2.00 

7  x. 10  =  0.70 

7  x. 10  =  0.70 

7.55 

SonicWall  Pro  3.3.1 

6  x.  30  =  1.80 

8  x. 25  =  2.00 

7  x. 25  =  1.75 

8  x. 10  =  0.80 

6  x  .10  =  0.60 

6.95 

Conclave  2 

6  x. 30  =  1.80 

9  x. 25  =  2.25 

6  x. 25  =  1.50 

6  x  .10  =  0.60 

6  x. 10  =  0.60 

6.75 

Sidewinder  Security  Server  4.1 

7  x. 30  =  2.10 

6  x. 25  =  1.50 

7  x. 25  =  1.75 

7  x. 10  =  0.70 

7  x. 10  =  0.70 

6.75 

Gauntlet  Firewall  5.0 

7  x. 30  =  2.10 

5  x. 25  =  1.25 

8  x. 25  =  2.00 

7  x. 10  =  0.70 

5  x. 10  =  0.50 

6.55 

eNetwork  Firewall  3.3 

5  x. 30  =  1.50 

6  x. 25  =  1.50 

7  x. 25  =  1.75 

7  x. 10  =  0.70 

6  x. 10  =  0.60 

6.05 

individual  category  scores  are  based  on  a  scale  of  1  to  10.  Percentages  are  the  weight  given  each  category  in  determining  the  total  score. 

Product:  Raptor  Firewall  6.0 

Vendor:  Axent  Technologies 

Axent's  Raptor  is  a  well-rounded 
enterprise  firewall  that  goes  the  extra 
mile  for  security  features. 


ened  kernel,  Sidewinder  includes  a  vanilla  set  of 
packet-filtering  rules  plus  a  large  set  of  TCP/IP  prox¬ 
ies  and  services. 

Sidewinder  is  one  of  the  few  products  that  still 
encourages  you  to  run  services  on  the  firewall 
itself,  taking  advantage  of  the  company’s  “tough  ker¬ 
nel.”  Even  if  someone  manages  to  get  control  of  the 
FTP  partition,  for  example,  the  intruder  cannot 
jump  over  and  affect  e-mail.  Sidewinder  also  shows 
its  age  in  some  of  the  proxies  it  supports.  For  exam¬ 
ple,  none  of  the  other  products  we  tested  has  an 
X.500  proxy  nor  the  massive  configuration  options 
for  X.500  that  Sidewinder  does. 

Although  Sidewinder  won  our  performance  race 
hands  down  with  double  the  throughput  of  the 
nearest  competitor,  it’s  not  a  firewall  for  the  faint 
of  heart.There’s  a  mutated  Unix  operating  system 
under  that  GUI,  and  you  better  know  how  to  man¬ 
age  it. 

Network  Associates’  Gauntlet  Firewall  5.0  is  the 
direct  descendent  of  one  of  the  oldest  firewalls 
around,  Trusted  Information  Systems’  freeware 
tool  kit.  Gauntlet  offers  packet  filtering 
for  services  that  need  it  and  proxies  for 
everything  else.  With  a  full-featured  HTTP 
proxy  (including  hooks  to  Network 
Associates’  CyberCop  intrusion-detection 
product),  Gauntlet  can  support  most  sim¬ 
ple  configurations. 

Gauntlet  consists  of  a  lot  of  pieces  linked 
together  with  a  GUI  pasted  on  top.The  Gaunt¬ 
let  team  has  done  a  good  job  at  report  genera¬ 
tion  and  rolling  over  log  files,  but  Gauntlet 
was  the  slowest  firewall  in  our  performance 
tests,  and  its  GUI  made  it  difficult  to  get  a 
complete  picture  of  our  configuration. 

IBM’s  eNetwork  Firewall  3  3,  like  Side¬ 
winder,  is  out  of  an  earlier  era  of  firewalls,  but  it 
lacks  the  depth  of  Sidewinder.  IBM  has  done  little  to 
take  this  firewall  forward,  other  than  giving  it  a  GUI 
and  adding  an  NT  version.  IBM  is  one  of  the  few  fire¬ 
wall  vendors  to  still  support  NEC’s  SOCKS  protocol 
for  proxying  users  through  the  firewall. 

Inside,  eNetwork  Firewall  consists  of  a  few  prox¬ 
ies  combined  with  packet  filters,  though  the  proxies 
that  are  included  are  not  particularly  intelligent.  For 
example,  even  though  eNetwork  has  what  IBM  calls 
“transparent  FTP,”  the  process  is  anything  but  trans¬ 
parent  —  users  have  to  change  their  FTP  syntax  to 
properly  accommodate  the  firewall.  What  IBM  does 
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*  TOWN  * 
MEETING 


Your  Enterprise 


The  following  vendors  sponsored  Network  World’s  Town  Meeting  ‘Tr 
Solutions  to  Managing  Enterprise  Networks.”  They  offer  a  wide  range  of  softwa 
hardware  and  services  to  assist  you  in  managing  your  systems  and  networks. 
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3Com  Corporation  offers  consumers,  enterprises  and  service  providers  the  industry’s  most  compre¬ 
hensive  voice,  video  and  data  communications  solutions  —  from  the  desktop  NIC  to  the  core  of  the 
LAN  and  across  the  WAN,  including  remote  access.  Transcend®  network  and  policy  management  is 
a  key  component  of  these  solutions.  It  combines  distributed  management  intelligence  embedded 
within  3Com  network  systems  with  powerful  network  management  applications.  Transcend  simplifies 
and  automates  administrative  tasks,  freeing  up  IT  staff  so  they  can  devote  more  time  to  planning  for 
growth  and  other  proactive  activities.  Transcend  solutions  maximize  network  management  staff  pro¬ 
ductivity  —  with  applications  including  Transcend  Network  Control  Services,  Transcend  Enterprise 
Manager,  Transcend  Traffix™  Manager,  and  InfoVista™  —  to  provide  device,  network,  policy  and  ser¬ 
vice  level  management.  3Com  —  More  connected™. 


www.3com.com/network_management 
(800)  NET-3Com  •  (408)  326-5000  (outside  the  US) 


With  more  than  1200  highly  trained  engineers  worldwide,  International  Network  Services 
offers  the  industry’s  largest,  most  experienced  team  of  network  consultants,  all  uniquely 
qualified  to  support  the  networking  needs  of  the  Global  2000.  Backed  by  the  VitalSuite 
family  of  network  and  application  performance  management  solutions,  INS  is  well  positioned 
to  help  businesses  worldwide  design,  build  and  maintain  the  application-ready  enterprise  of 
the  future.  To  download  our  white  paper,  "Assessing  Your  Network  Management 
Requirements”,  please  see  our  website  at  www.ins-insoft.com/edm/wp47. 


AI30 


www.ins.com 
(888)  INS-8100 


NetScout  Systems,  Inc.  designs,  manufactures,  markets,  and  supports  Application  Flow 
Management-based  solutions  that  enable  businesses  to  manage  the  performance  of  computer 
networks  and  critical  networked  business  software  applications.  NetScout  solutions  illuminate  all 
aspects  of  network  traffic,  focusing  on  the  applications  at  the  heart  of  the  business. 


NetScout's  Probes  and  Remote  Agents  serve  as  applications-aware,  non-intrusive  data  sources  for 
every  segment  type:  Gigabit  Ethernet,  Fast  Ethernet,  Fast  EtherChannel,  VLANs,  FDDI,  Frame 
Relay/WANs,  and  ATM  segments. 


AppScout™  application  flow  monitor,  NetScout  Manager  Plus™  console  software,  and  WebCast™ 
reporting  software  complete  the  NetScout  family,  providing  comprehensive,  easy  to  use  data  pre¬ 
sentation  and  analysis. 


£00  NetScout. 


www.netscout.com 
(978)  614-4000 
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Headquartered  in  Marlboro,  MA,  Concord  Communications,  Inc.,  is  a  leading  supplier  of  Web- 
based,  automated  network  reporting  and  analysis  solutions  that  provide  customers  with  the  infor¬ 
mation  they  need  to  effectively  plan  and  manage  the  growth  of  their  enterprise  networks. 


Concord  is  recognized  by  two  prominent  research  firms,  IDC  and  The  Meta  Group,  as  the  leader 
in  worldwide  market  share  for  the  performance  reporting  and  analysis  market.  The  premier  service 
providers,  ISPs  and  Fortune  1000  companies  turn  to  Concord  each  morning  to  assess  the  health 
of  their  corporate  networks. 
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The  Total  View ” 

www.concord.com 
(800)  250-6507 
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www.micromuse.com 
(415)  538-9090 


Tivoli  empowers  you  to  monitor  systems,  manage  user  accounts,  distribute  software,  maintain 
applications  and  ensure  network  availability.  And  through  our  partner  program,  Tivoli  has  built 
an  industry  that  protects  your  investment  in  existing  management  products  and  ensures  your 
choice  of  future  solutions. 


JAM/ 


www.tivoli.com 
(888)  Tivoli-1 


TECHNOLOGIES 


(212)  285-1500 
www.avesta.com 


DECISION  SUPPORT  TOOLS 

for  Networks  and  Applications 


A  Proactive  Met 


(202)  364-4700 
www.mii3.com 


(877)  450-7700 
www.proactivenet.com 


response 


EBQ 


(703)  739-7770 
www.responsenetworks.com 


Makxq  NetuJolU  £ma>ilei 

(800)  RIT-1647 
www.rittech.com 


(603)  337-7700 
cabletron.com/spectrum 


Concord  is  a  publicly  held  company  and  its  securities  are  traded  on  the  NASDAQ  National  Market 
under  the  symbol  “CCRD”. 


Micromuse  Inc.  (Nasdaq:  MUSE)  is  the  leading  provider  of  service-level  management  soft¬ 
ware.  The  company's  Netcool®  suite  of  applications  is  used  by  managed  network  services 
providers,  Internet  service  providers,  telecommunications  firms,  and  corporate  enterprises 
worldwide.  Netcool’s  distributed  architecture  allows  network  operators  to  custom-design 
realtime  views  of  enterprise-wide  services.  These  views  provide  operators  with  summaries  of 
service  availability  and  details  of  network-based  events,  enabling  them  to  circumvent  service 
outages.  A  service  might  be  an  end-to-end  application,  a  digital  transmission  service,  a  busi¬ 
ness  unit,  a  virtual  private  network,  or  an  Internet  connection.  Netcool  provides  these  capa¬ 
bilities  off-the-shelf,  providing  a  rapid  return  on  investment. 


Tivoli  offers  a  wide  range  of  solutions  to  manage  systems,  applications  and  networks  across  your 
enterprise,  while  controlling  IT  costs.  Tivoli  management  software  delivers  a  solution  that  gives 
you  centralized  control,  a  solution  that  is  open,  scalable  and  reliable,  and  that  spans  your  data¬ 
center  to  your  laptops  to  your  network  devices  to  the  Internet. 


If  you  would  like  information  on  the  next  Enterprise  Network  Management  Town  Meeting,  please  call  (800)  643-4668  or  visit  www.nwfusion.com/to wnm*c 


Buyer's  Guide 


Net  Results 

Network  World  Raptor  Firewall  6.0 

Axent  Technologies 
m  (301)258-5043 

[tlliimH  wwwaxent-com/product/rsbu/ 
firewall/default.htm 
Pricing  starts  at  $2,500  for  25  users 


Pros 

▲  Comprehensive  security 
features 

▲  Easy  to  configure 


Con 

T  Reporting  could  be  stronger 


SonicWall  Pro  3.3.1 

Sonic  Systems 
(888)  557-6642 

www.sonicsys.com/Firewall-PRO/ 

index.html 

$2,995  for  unlimited  users 

Pros 

▲  Easy  to  configure 

▲  Fast  to  install 

Con 

▼  Limited  set  of  options 
and  proxies 

▼  No  dual  DNS  support 

Conclave  2 

Pros 

Cons 

Internet  Dynamics 

▲  Outstanding  user  interface 

▼  Proxies  are  thin  for  an 

(805) 370-2200 

▲  Easy-to-validate  configurations 

enterprise  firewall 

www.conclave.com 

Pricing  starts  at  $2,845  for  25  users 

T  No  dual  DNS  support 

Sidewinder  Security  Server  4.1 

Pros 

Con 

Secure  Computing 

▲  Excellent  performance 

T  Need  to  know  Unix  to  run  the 

(800) 379-4944 

▲  Mandatory  access  controls  if 

firewall  properly 

www.securecomputing.com/ 

P_FWall_SWF_FRS.html 

you  want  to  run  services 

Pricing  starts  at  $6,900  for  a  one-year  license  for  up  to  100  users 

Gauntlet  Firewall  5.0 

Pros 

Cons 

Network  Associates 

A  Strong  reporting 

▼  Poor  performance  on  NT 

(408) 988-3832 

A  Broad  set  of  proxies 

T  Hard  to  understand 

www.nai.com/asp_set/products/ 

tns/gauntlet.asp 

configuration 

Pricing  starts  at  $1,600  for  a  one-year  license  for  up  to  100  users 

eNetwork  Firewall  3.3 

Pros 

Cons 

IBM 

A  SOCKS  support 

▼  Poor  performance  on  NT 

(800)  426-2255 

A  Bundled  with  many  third-party 

T  Difficult  to  configure 

ww.software.ibm.com/security/firewall 

plug-ins 

▼  Cryptic  logs  and  poor  reportinc 

Pricing  starts  at  $2,499  for  25  users 

▼  Poor  built-in  proxies 

do  well,  though,  is  motivate  tliird  parties  to  integrate 
their  products  with  IBM’s  product.  While  eNetwork 
Firewall  comes  on  one  CD-ROM,  you’ll  receive  a  stack 
of  10  others  with  the  pieces  that  IBM  doesn’t  include, 
such  as  HTTP  filtering  and  management  and  virus 
scanmng. 

One  of  the  nice  things  about  IBM’s  eNetwork 
Firewall  is  that  it  takes  user  authentication  seriously. 
Unlike  most  vendors  who  simply  tell  you  that  it’s  a 
really  bad  idea  to  allow  re-usable  passwords,  IBM 
actually  gives  you  a  copy  of  Security  Dynamics’ACE/ 
Server  and  a  couple  of  hardware  tokens.  It’s  not 
enough  for  a  full  deployment,  but  putting  the  parts  in 
front  of  you  is  a  big  step  forward. 

Security  matters 

When  we  started  evaluating  these  products,  we 
first  focused  on  their  security’  features. There  are  cer¬ 
tain  features  every’  firewall  should  have:  proxies  for 
control  of  some  applications;  packet  filtering  for 
speed  or  where  proxies  aren’t  needed;  hooks  to  user 
authentication  systems;  Network  Address  Translation; 
software  for  virtual  private  networks  (VPN)  via  IP 
Security  if  possible;  and  some  way  of  handling  diffi¬ 
cult  protocols  such  as  DNS. 

DNS  was  a  trouble  spot  for  many  of  these  prod¬ 
ucts.  IBM’s  idea  of  handling  DNS  with  three  separate 
servers  requires  a  high  level  of  DNS  expertise  —  and 
it  depends  on  Microsoft’s  BIND-based  DNS  server 
running  on  the  firewall,  with  all  of  the  known  securi¬ 
ty’  problems  of  running  an  old  version  of  BIND.  (See 
www.  isc .  org/view.  cgi?/products/BIND/index.phtm 
for  a  discussion  of  such  security  problems  in  old  ver¬ 
sions  of  BIND.) 

Gauntlet  didn’t  do  much  better,  also  bringing  in 
Microsoft’s  DNS  server.  On  the  other  hand.  Conclave 
and  SonicWall  Pro  didn't  have  a  DNS  server  that  can 
run  on  the  firewall. 

Similarly,  proxy  capabilities  varied.  Every  product 
had  an  HTTP  proxy,  but  only  Gauntlet  had  a 
Lightweight  Directory  Access  Protocol  (LDAP)  proxy. 
On  the  other  hand,  the  Gauntlet  LDAP  proxy  didn’t 
do  anything  —  you  might  as  well  have  gone  with 
packet  filtering  for  all  the  functionality  it  added. 

Within  proxies  we  also  found  substantial  differ- 
ences.The  most  important  proxy  to  most  organiza¬ 
tions  is  the  HTTP  proxy.  Some  want  to  control 
access;  others  are  more  concerned  with  viruses. 
SonicWall  Pro  had  good  support  on  the  control  side: 
you  could  block  out  ActiveX,  Java  and  cookies,  and 
run  any  Web,  Network  News  Transfer  Protocol,  FTP  or 
Gopher  traffic  through  a  content  filter  list.  SonicWall 
Pro  also  let  us  vary  filtering  based  on  time  of  day. 
Conclave’s  HTTP  proxy  gave  us  even  more  flexible 
options  for  blocking  traffic,  and  it  has  built-in  virus 


scanning  for  HTTP  traffic. 

On  the  other  hand,  while  Sidewinder’s  proxy  can 
perform  content  filtering,  it  can’t  identify  HTTP  parts 
such  as  ActiveX  or  certain  kinds  of  Java.  IBM  didn’t 
even  take  a  credible  swipe  at  advanced  HTTP  proxy 
services;  you  have  to  use  one  of  the  third-party  prod¬ 
ucts  IBM  includes. 

As  for  other  security  features,  only  SonicWall  Pro 
offers  stateful  packet  filtering,  and  only  Sidewinder 
lets  packet  filtering  trigger  an  audit  event. 

IBM’s  interface  for  designing  packet  filters  was  so 
awful  that  we  gave  up  any  hope  of  building  our  spe¬ 
cial  packet-filter  rule  and  manually  edited  the  config¬ 


uration  file  —  a  method  the  documentation  discour¬ 
aged.  We  were  also  disappointed  in  IBM’s  and  Sonic 
Systems’VPN  software  because  neither  supports 
Internet  Key  Exchange  protocol  (IKE),  greatly  in¬ 
creasing  the  management  burden  while  decreasing 
security. 

Most  of  these  firewalls  have  awful  mail  proxies, 
stripping  mail  down  by  leaving  out  delivery  status 
notification,  ESMTP  extensions,  encryption  and 
authentication  in  a  way  that  actually  reduces  security. 
Sidewinder  offers  the  most  powerful  mail  proxy,  with 
sophisticated  and  well-designed  filtering  capabilities, 
but  we  weren’t  impressed  with  its  implementation. 
Out  of  the  box,  Sidewinder  comes  configured  as  a 
promiscuous  mail  relay  that  makes  you  an  unknow¬ 
ing  vector  for  spammers  to  distribute  their  garbage 
all  over  the  Internet. To  fix  this,  you  have  to  venture 
into  the  wild  world  of  sendmail.cf  files.  In  every  case, 
you’d  be  better  off  transparently  handing  your  mail 
through  the  firewall  to  a  real  mail  relay. 

Overall,  we  found  Raptor  delivered  the  most  com¬ 
prehensive  security  features.  Gauntlet  and  Sidewinder 
were  close  behind. 

Configuration  and  management 

The  weakest  aspect  of  firewall  products  has  long 
been  their  configuration  utilities. The  ideal  manage¬ 
ment  interface  lets  an  unsophisticated  user  build  a 
simple  configuration  that  supports  an  organization’s 
security  policy,  while  at  the  same  time  letting  a 
security  guru  do  all  the  tinkering  and  fine-tuning 
required. 


How  we  did  it 

We  set  up  each  firewall  using  our  corporate  security  policy:  a  combination  of  internal  and  external 
access,  authentication,  and  some  blocking  and  filtering.  We  verified  that  the  products  could  imple¬ 
ment  the  basic  policy  we  needed  and  checked  for  obvious  errors  in  configuration  using  external  veri¬ 
fication  tools. 

Because  we  wanted  to  do  performance  testing,  we  asked  all  the  vendors  to  provide  software  on  Win¬ 
dows  NT  if  available.  Because  not  all  the  vendors  were  able  to  accommodate  this  and  because  the 
hardware  varied  from  vendor  to  vendor,  we  conducted  only  minimal  performance  testing. 

The  International  Computer  Security  Association  has  certified  all  these  products,  so  we  didn’t  dupli¬ 
cate  that  organization’s  extensive  security  attacks. 

(fur  hardware  platform  for  testing  most  firewalls  was  a  350  MHz  Pentium  II  server  with  dual 
10/100M  bit/sec  Ethernet  cards,  and  384M  bytes  of  RAM  running  Windows  NT  Server  4.0  with  Service 
Pack  V  Secure  Computing  provided  a  450-MHz  Pentium  II  system,  and  Sonic  Systems  provided  its  own 
proprietary  hardware. 
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We  found  IBM's  configuration  utility  overly  compli¬ 
cated.  Making  sense  of  overlapping  services,  rules 
and  connections  in  huge  Java-built  windows  wasn’t 
easy.  It  took  us  longer  to  construct  our  test  configura¬ 
tion  in  cNctwork  Firewall  than  in  any  other  firewall, 
largely  because  of  its  GUI. 

We  also  found  Gauntlet’s  configuration  unsettling. 
While  you  may  think  you  know  what  each  individual 
piece  is  doing,  when  you  combine  Gauntlet  trans¬ 
parency  (which  has  one  default  behavior  for  incom¬ 
ing  data  and  another  for  outgoing),  proxies,  policies, 
destination  matching  and  packet  filtering,  you  may 
find  that  it’s  difficult  to  get  a  good  overview  of  your 
entire  configuration. 

We  found  some  features,  such  as  remote  manage¬ 
ment,  available  in  all  the  products  we  looked  at. 
However,  when  we  went  looking  for  separate  config¬ 
uration  and  monitoring  functions,  we  found  them 
only  in  Conclave. 

Our  favorite  advanced  feature  —  the  ability  to 
delegate  different  configuration  tasks  to  different 
network  managers  —  is  available  in  Conclave, 
Sidewinder  and  eNetwork  Firewall.  However,  IBM’s 
restrictions  are  only  built  into  the  GUI  and  not 
enforced  by  the  firewall  itself. 

A  good  test  of  a  configuration  interface  is  how 
difficult  it  is  to  build  insecure  configurations.  We 
found  the  most  error-proof  GUIs  in  Conclave  and 
SonicWall  Pro,  though  they  are  miles  apart  in 
sophistication.  Conclave  offers  a  fully  policy-based 
management  system,  and  once  we  got  the  hang  of 
it,  we  could  do  powerful  things  very  simply.  Sonic- 
Wall  Pro  doesn't  have  nearly  as  much  power  as 
Conclave,  but  its  GUI  is  simple. You  can’t  do  certain 
things,  but  what  you  can  do,  you  don’t  make  mis¬ 
takes  doing. 

Conversely,  with  eNetwork  and  Raptor  we  found  it 
possible  to  make  an  insecure  configuration  or  one 
with  holes  in  it  without  noticing  anything. 


THE  FINAL  ROSTER 


Turning  down  vendors  who  wanted  us  to  review 
their  firewalls  was  as  unpleasant  as  cutting  1 4-year- 
old  hopefuls  from  the  freshman  baseball  team,  but 
it  was  necessary.  With  more  than  30  firewall  ven¬ 
dors  in  our  Buyer’s  Guide  we  couldn’t  possibly  test 
a  product  from  each. 

In  the  past  when  we’ve  been  faced  with  too  many 
vendors,  we’ve  based  our  lineup  on  market  share.  In  the 
firewall  field,  market  share  hasn’t  changed  much  since 
our  last  Buyer’s  Guide  {NW,  June  1 , 1998),  but  we’ve 
seen  a  host  of  new  products  we  haven’t  had  a  chance 
to  review.  So  this  time  we  selected  products  whose  fire¬ 
wall  features  we  have  never  looked  at  or  haven’t 
reviewed  in  more  than  two  years. 

We  last  tested  the  firewall  capabilities  of  this  year’s  Blue  Ribbon  Award  winner,  Axent 
Technologies’  Raptor,  in  a  firewall  Buyer’s  Guide  we  published  when  the  product  was  known  as 
Eagle,  before  Axent  acquired  Raptor  Systems  {NW,  Feb.  3,  1997). 

In  the  same  review,  we  tested  Trusted  Information  Systems’ Gauntlet  firewall,  which  is  now 
owned  by  Network  Associates.  It  ’s  the  first  time  in  three  years  we’ve  reviewed  two  veteran  fire¬ 
walls:  IBM’s  eNetwork  Firewall  and  Secure  Computing’s  Sidewinder. 

Showing  up  for  the  first  time  in  a  Network  World  firewall  review  is  Internet  Dynamics’  Conclave 
2,  which  debuted  in  May.  We  reviewed  an  earlier  release,  Conclave  1.5,  but  we  only  tested  the  VPN 
features  of  Conclave  in  the  previous  review  {NW,  May  10).  Another  newcomer  is  Sonic  Systems’ 
SonicWall  Pro,  which  was  just  released  in  April. 

We  invited  Cisco  to  submit  its  IOS  Firewall,  but  the  company  declined  our  invitation.  Computer 
Associates  chose  not  to  send  us  its  latest  product.  Check  Point  Software,  the  market  share  leader, 
was  eager  to  participate,  but  we’ve  tested  Check  Point  products  twice  in  the  past  13  months  and 
in  every  firewall  review  since  1994. The  company  captured  a  Blue  Ribbon  in  our  review  of  combi¬ 
nation  firewall  and  VPN  appliances  {NW  April  19),  and  took  home  the  Blue  Ribbon  in  last  year’s 
firewall  Buyer’s  Guide. 

Though  it  was  tough  to  narrow  the  field,  we  think  we  ended  up  with  a  strong  cross  section  of  the 
enormous  and  competitive  firewall  market. 


Reporting  and  alerting 

After  securing  your  netw  ork,  you’ll  want  to  know 
how  well  your  firewall  is  functioning.  We  found  that 
Gauntlet  provided  the  best  reports  with  the  most 
useful  information,  followed  by  Sidewinder. 

Conclave  and  SonicWall  Pro  both  prepare  HTML 
reports,  although  neither  impressed  us  with  its  com¬ 
pleteness  or  flexibility.  IBM’s 
eNetwork  Firewall  and  Axent ’s 
Raptor  have  neglected  report¬ 
ing;  both  expect  you  to  dump 
your  logs  into  a  database  to  gen¬ 
erate  reports.  We  found  IBM’s 
logging  system  particularly 
obscure  when  we  were  trying 
to  debug  problems  in  our  con- 
figuration:The  error  message 
“ICA3015”is  unclear  unless 
you've  got  the  manual  lying 
around. 

The  flip  side  of  reporting  is 
alerting:  a  firewall’s  ability  to 
alert  you  when  something  is 
amiss. The  strongest  in  this  area 
are  Axent ’s  Raptor  and,  to  a 
lesser  degree,  IBM’s  eNetwork  Firewall.  With  Raptor, 
we  had  much  more  flexibility  than  we  even  needed. 
After  working  with  these  firewalls  in  production, 
we  found  that  the  ability  to  selectively  silence  a  par¬ 
ticular  alert  is  often  invaluable,  and  we  could  do 
that  easily  with  Raptor. 

Overall,  we  were  less  impressed  with  reporting  and 
alerting  features  than  any  other  aspect  of  the  products 
we  looked  at.  While  firewall  vendors  have  concentrat¬ 


ed  on  increasing  security  features,  most  have  not  paid 
as  much  attention  to  logging,  reporting  and  alerting. 
Admittedly,  better  reports  aren’t  as  critical  as  a  better 
SMTP  proxy,  but  there’s  little  excuse  for  firewall  veter¬ 
ans  to  have  done  such  a  poor  job  at  reporting  after  so 
many  years  of  experience  with 
building  firewalls. 

Final  analysis 

Overall,  we  found  that 
Axent’s  Raptor  beat  IBM’s 
eNetwork  Firewall  and 
Network  Associates’  Gauntlet 
for  large  networks.  Secure 
Computing’s  Sidewinder 
stands  apart  from  the  others 
because  of  its  blazing  perfor¬ 
mance.  If  you  have  a  faster 
link  than  aT-1  to  protect,  you 
may  want  to  keep  an  eye  on 
Unix-based  firewalls  such  as 
Sidewinder.  (Raptor,  eNetwork 
Firewall  and  Gauntlet  are  also 
available  on  Unix,  though  we  tested  them  on  NT.) 
Secure  Computing’s  hardened  kernel  sets  it  apart, 
particularly  if  you  need  to  run  services  on  your  fire¬ 
wall  system  —  something  we  don’t  recommend. 

For  branch  offices,  the  SonicWall  Pro  has  a  lot 
going  for  it,  including  a  huge  price  advantage,  a 
strong  HTTP  proxy  and  an  easy-to-use  GUI.  SonicWall 
Pro’s  simple  configuration  interface  made  it  easy  to 
make  secure  configurations  quickly,  and  —  more 


More  Online 


>  Results  of  our  performance  testing. 

>  The  International  Computer  Security 
Association  s  firewall  resources 
and  certification  criteria. 

•  Links  to  our  most  recent  firewall 
and  security  appliance  reviews. 

>  A  chance  to  chat  with  reviewer 
Allen  Gwinn. 


www.nwfusion.com 


importantly  —  hard  to  make  insecure  configurations. 
This  distinguishes  it  from  the  others  we  looked  at. 

Internet  Dynamics’  Conclave  is  a  product  to 
watch  closely.  Conclave  has  some  strong  advantages 
—  no  other  firewall  in  this  review  lets  you  manage 
multiple  systems  as  a  single  entity.  However,  the 
product  still  has  a  good  distance  to  go  before  it 
matches  the  basic  firewall  features  available  from 
other  vendors. 

Snyder  is  a  senior  partner  with  Opus  One,  a  con¬ 
sulting  firm  in  Tucson,  Ariz.,  specializing  in  e-mail, 
security  and  networking.  He  can  be  reached  at 
joel.snyder@opusl.com. 

Gwinn  is  associate  director  of  computing  ser¬ 
vices  at  the  Edwin  L.  Cox  School  of  Business  at 
Southern  Methodist  University  in  Dallas  where  he 
works  on  wireless  networking  and  security  projects. 
He  can  be  reached  at  allen@radio.net. 


Snyder  is  also  a  member  of 
the  Network  World  Test 
Alliance,  a  cooperative  of  the 
premier  reviewers  in  the  net¬ 
work  industry,  each  bringing 
to  bear  years  of  practical 
experience  on  every  review.  For  tnore  Test 
Alliance  information,  including  what  it  takes 
to  become  a  member,  go  to  www.nufusion. 
com/alliance. 
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Practical  answers  to 
rea!4ife  questions 

You -know  what  VPNs  promise:  cost  savings,  business 
efficiencies  and  improved  relationships  with  your  partners. 

But  once  that's  understood,  are  you  prepared  to  deal  with 
the  technical  issues  of  planning  a  full-scale  VPN  deployment 
enterprise-wide?  Integration  issues,  scalability,  site-to-site 
viability,  security,  mission-critical  performance  and  service-level 
guarantees  are  just  a  few  questions  you  should  be  considering 
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1999  Seminar  Tour 

New  York,  NY  •  September  23 
Hartford,  CT  •  September  24 
Research  Triangle  Park,  NC  •  October  13 
Miami,  FL  •  October  14 
San  Francisco,  CA  •  November  3 
Irvine,  CA  •  November  4 
Chicago,  IL  •  December  8 
Detroit,  Ml  •  December  9 
: 


Learn  from  the  Leader 


Directed  by 

Eric  Zines,TeieChoice,  Inc. 


Network  WorldTechnical  Seminars  is  known  throughout  the  networking 
community  for  providing  IT  professionals  with  expert,  unbiased  education 
on  the  latest  technologies  and  trends  shaping  today's  mission-critical  networks. 
This  reputation  combined  with  our  100%  satisfaction  guarantee  makes  us  the 
educator  of  choice  in  the  networking  industry. 


Bring  a  customized  version  of  this  seminar  to  your  company. 
Contact  Bill  Bernardi  at  (508)  820-7506  or  bbernard@nww.com. 
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DacF i n  der 

1  FUSION 


For  complete  program  agenda  and 
registration  information,  contact  us  at 

(800)643-4668 

www.nwfusion.com/semmars/vfi 


3.  Understand  how  to  grow  your  VPN  to  match  your  performance 
requirements. 


On-Site  Seminars 


Register  Today! 


$450  Registration  Fee 


2.  Lea'  n  how  others  are  growing  their  VPN  pilots  to  support 
mission-critical  applications. 


4.  Learn  to  integrate  existing  security  measures  with  your  VPN  plans. 


5.  Understand  how  to  deploy  the  different  types  of  VPNs: 
remote  access  and  site  to  site. 

6.  Have  your  key  questions  answered  by  the  leading  VPN  vendors  and 
service  providers. 


Take  advantage  of  our  Team  Discounts 

2  registrants — $400  each 

3  registrants — $350  each 
Every  4th  registration  is  FREE 


Practical  VPN  Deployment:  The  Next  Step  is  a 

one-day  seminar  designed  to  give  you  a  clear  understanding 
of  these  technical  issues  and  how  to  meet  them  head  on. 
Seminar  director  Eric  Zines,  Senior  VPN  Consultant  with 
TeleChoice,  Inc.,  will  explore  the  greatest  challenges  of  VPN 
deployment,  and  provide  solutions  for  doing  so  successfully. 
He'll  also  share  the  success  stories  of  early  adopters,  including 
their  trials  and  tribulations  on  their  way  to  success. 


6  Reasons  Not  to  Miss  This  Seminar 


1.  Understand  the  most  common  pitfalls  in  building  an 
enterprise-class  VPN,  and  learn  to  avoid  them. 
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Dell's  midrange  defwrtniem.il  server. 

the  PowerFdge  -4300.  offers  intpres 
sive  ease  of  use.  performance  .uul 
flexibility  Its  file  server  performance 
beats  all  the  w  orkgroup  servers 
we  Ye  tested.  Priced  at  $  l  4. 103  as 
tested,  the  PowerEdge  a 300  is  a  good 
value  w  ith  a  lot  of  room  inside  for 
future  hardware  expansion.  Dell's 
server  is  a  good  choice  tor  shops  that 
need  to  start  small  and  grow 
The  a 3 00  scored  9.-4  out  of  a 
possible  10  for  performance.  Specifically.  Dell  s 
box  earned  a  perfect  10  on  our  file  test  and 
scored  a  pair  of  0s  on  our  SQl.  and  net  tests.  To 
derive  the  performance  score,  we  w  eighted  the 
file.  SQL  and  network  tests  at  3^V  3^%  and  30%. 
respectively. 


Review 


TOP  OF  THE 
MIDRANGE 


Dell's  Power  Edge  4300  department  server  is  a  good 
performer  and  a  good  value. 


Test  configuration 

The  server  w  e  tested  had  tw  o  ^00-MHz  Pentium 
III  processors  with  ^  1 2k  bytes  of  Level  2  cache 
and  1G  bite  of  RAM. The  server  came  w  ith  five 
9.  lG-bvte  10k  rpm  drives  loaded  in  the  eight-slot 
drive  cage.  The  drive  cage  w  as  connected  to  one 
channel  of  Dell's  four-channel  PERC2  PowerEdge 
Expandable  RAID  Controller  SCSI  RAID  array. The 
PERC2  card  came  with  128M  bytes  of  onboard 
cache. Two  PCI  Intel  ProlOO-t-  netw  ork  interface 
cards  (NIC)  were  loaded  in  the  server  for  netw  ork 


access. The  RAID  controller  and  two  NICs  occu¬ 
pied  three  of  the  six  33-MHz  32-bit  PCI  slots. Two 
of  the  slots  are  shared  PCI/ISA  slots. The  server 
came  with  three  load  balancing,  hot-swappable 
power  supplies  that  offer  2+1  redundancy. 

The  PowerEdge  +300's  motherboard,  which  uses 


Intel's  440GX  chipset,  has  two  SCSI  controllers  — 
an  Adaptec  7860  Ultra  Narrow  SCSI  controller, 
which  controlled  the  server's  CD-ROM  drive,  and 
an  Adaptec  7890  Ultra2  SCSI,  which  was  not  used 
in  this  configuration  because  of  the  presence  of 
the  RAID  array  controller. 

The  five  drives  were  configured  into  one  RAID  0 
stripe  set. The  operating  system  was  installed  over 
one  of  the  two  partitions  configured  across  the 
striped  set.  All  the  data  for  the  tests  was  loaded  on 
the  second  partition. The  two  NIC  cards  were  con¬ 
figured  for  full-duplex,  100M  bit/sec  operation. 

The  PowerEdge  4300  chassis  provides  toolless 
accessibility'  to  all  serv  er  components. The  front 
bezel  exposes  the  eight-slot  hot-pluggable  drive 
cage  and  has  a  door  hiding  the  CD-ROM  and 
diskette  drives,  the  two-slot  hard  drive  cage  and 
the  power  switch. The  side  of  the  case  can  be 
removed  for  access  to  the  CPUs,  RAM  and  I/O 
slots.  If  you  only  need  to  access  the  I/O  slots,  a  con¬ 
venient  trap  door  is  provided  so  you  don’t  have  to 
remove  the  side  cover. 

The  4300  can  be  rack  mounted;  the  internal 
media  cage  can  be  rotated  90  degrees  so  the  drives 
are  in  an  upright  position  and  the  internals  can  be 
accessed  from  the  top. 

Management  software  included 

The  serv  er  comes  with  a  Dell  Server  Assistant 
CD-ROM.  It  includes  hardware  drivers  and  quick 
installation  aides  for  NT  NetWare,  OS/2  Warp  and 
Unix. 

Also  bundled  with  the  server  is  HP  OpenView 
Network  Node  Manager/SE,  which  lets  you  inte- 


Dell  PowerEdge  4300 

Performance  40%  9.4 

Features  and  flexibility  30%  10 


Features  and  configurations 

NetwodW 

ill 


PowerEdge  4300 

Dell 

(800)  999-3355 

www.dell.com/products/poweredge/pe4300/index.htm 
SI  4,1 03 


Processor  type 

500-MHz  Pentium  III,  512K-byte  Layer  2  cache 

Number  of  processors 

2 

Number  of  processors 

2 

supported 

Memory  configuration 

1G  byte 

Number  and  type  of  RAM  slots  4 


Expansion  slots  present 

4  PCI  (all  PCI  slots  are  32-bit  33-MHz,  not  hot-pluggable),  2  PCI/ISA 

Expansion  slots  available 

3  PCI 

Disk  controller 

PERC2  four-channel  Ultra2  SCSI,  128M  bytes  cache,  battery  backup;  Ultra2 
SCSI  on  motherboard;  UltraNarrow  SCSI  on  motherboard 

Hard  drive  description 

(5)  Seagate  9.1  G  byte  10K  rpm  Ultra2 

Number  and  description 
of  hard  drive  bays 

(8)  1-inch  or  (6)  1.6-inch  hot-pluggable  slots,  1 -channel  backplane,  single¬ 
channel  cage  with  (2)  1-inch  hot-pluggable  slots 

Network  interface 

(2)  Intel  Pro  100+  Fast  Ethernet 

CD-ROM 

NEC  14-32X  UltraNarrow  SCSI 

Availability  features 

Hot-pluggable  redundant  power  supplies,  hard  drive  and  fans,  dual  processors, 
ECC  RAM 

Manageability  features 

Optional  remote  management  card  (DRAC2),  integration  software  for  major 
enterprise  management  platforms 

Security  features 

Locking  case,  disks  and  bezel 

Bundled  software 

Dell  Server  Assistant,  Dell  OpenManage  IT  Assistant,  Dell  OpenManageX 

Warranty 

3-year  parts,  1-year  next  business  day  on-site 

Manageability  20% 

10 

Serviceability  10% 

8 

Total  9.5 


Individual  category  scores  are  based  on  a  scale  of  1  to  10. 
Percentages  are  the  weight  given  each  category  in  determining 
the  total  score.  The  World  Class  Award  goes  to  products  that  earn 
9.0  or  above  on  our  ScoreCard. 
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Review 


grate  the  PowerEdge  4300  into  enter¬ 
prise  Open  View  management  envi¬ 
ronments. 

OpenManage  IT  Assistant,  a  Dell 
graphical  user  interface-based  man¬ 
agement  system,  is  also  included. 
Another  management  product, 
OpenManage  Connections,  provides 


software  instrumentation  to  integrate 
the  PowerEdge  server  into  HP/UX, 
Microsoft  SMS, Tivoli  Enterprise 
Console, Tivoli  TME,  CA-Unicenter 
TNG,  NNM  for  Solaris  and  NetView 
management  platforms.  A  Windows 
NT  management  product  called 
OpenManageX  is  also  bundled  with 


the  server. 

Besides  providing  great  perfor¬ 
mance  for  the  price,  the  PowerEdge 
4300  offers  an  easy  upgrade  path  for 
organizations  that  want  to  start  small 
but  plan  to  grow  big.  Its  serviceability 
and  availability  features  let  it  grow  to 
higher  levels  of  performance. 


the  Giants  of 


Commun  ications 


Will  you  be  there? 


This  November,  over  4,500  Network, 
Communications,  and  IT  professionals 
will  converge  on  New  York  City  for 
Corporate  Networks  99.  They  will  come 
with  questions  and  leave  with  solutions. 

For  over  20  years,  the  Communications 
Managers  Association  (CMA)  has  been 
providing  users  with  invaluable 
information.  Corporate  Networks 
(formerly  CMA  Telcom),  the  CMA's  annual 
event,  is  the  pinnacle  of  that  effort. 

This  year's  conference  and  exposition  will 
feature  the  new  IP  Solutions  Center,  an 
interactive  pavilion  providing  answers  to 
some  of  today's  most  pressing  IP  issues. 


Other  topics  will  include  Wireless  Technology, 
The  Future  of  PBX,  and  LAN /WAN 
Integration. 

Don't  miss  out  on  this  gigantic  event.  For  free 
Corporate  Networks  exhibitor  information, 
call  800-262-3976,  or  visit  our  Web  site  at 
www.cma.org. 


The  CMA  Presents 

CORPORATE 


NETWORKS 


IP  •  COMMUNICATIONS  •  CONVERGENCE 

November  15  -  18,  1999 
Hilton  New  York  &.  Towers 


New  York 

800-262-3976 

www.cma.org 


Server  testing 
is  performed  at 
North  Carolina 
State  University’s 
Centennial 
Networking  Labs 
(CNL)  in  Raleigh. 

CNL  tests  network  equipment 
and  netuK>rk-attached  devices 
for  interoperability  and  perfor¬ 
mance.  Bass,  a  senior  technical 
staff  member  at  CNL,  designs 
and  leads  the  execution  of  the 
test  suites.  He  can  be  reached  at 
john_bass@ncsu.  edu. 

Bass  is  also  a  member  of  the 
Network  World  Test  Alliance.  For 
more  Test  Alliance  information, 
including  what  it  takes  to 
become  a  member,  go  to  www. 
nwfusion.  com/alliance. 


Benchmark  results 

We  used  Bluecurve's  Dynameasure  File 
Professional  2.0  and  Dynameasure  SQL 
Professional  2.0  to  measure  1/0  and  CPU¬ 
intensive  operations  and  Ganymede 
Chariot  to  stress  the  network  interface. 


File  server  tests  (Kbyte/sec) 


SQL  tests  (transaction/sec) 


Network  tests  (M  bit/sec) 


NT 


NetWare 


0  20  40  60  80  100 


Online 

•  See  how  we  test  servers. 

WWW.  nwfusion 


SltoN 

.com 
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nagement 


Career  Development ,  Project 
Management ,  Business  Justification 


Strategies 


Errand  service 
is  trendy  perk 


BY  JULIE  BORT 


Imagine  coming  to  work,  logging  on  to  a  Web 
site,  inputting  your  personal  to-do  list,  then  hav¬ 
ing  someone  else  perform  the  tasks.  You  could 
if  your  employer  offered  concierge  services, 
one  of  the  latest  perks  aimed  at  attracting  and 
retaining  high-tech  talent. 

Companies  such  as  Brooktrout  Technologies, 
Hewlett-Packard,  I-Cube,  Lockheed  Martin,  Microsoft, 
Motorola  and  Sun  offer  their  employees  so-called 
“convenience  services.”  Some  businesses  offer  a 
handful  of  amenities,  such  as  dry  cleaning  or  meal 
preparation.  Others  contract  a  concierge  service 
provider  to  handle  just  about  any  errand,  whether 
it’s  shopping  for  a  gift,  taking  the  car  to  be  repaired 
or  planning  a  family  vacation. 

High-tech,  financial  services  and  management  con¬ 
sulting  firms  are  embracing  concierge  services,  says 
Holly  Stiel,  a  concierge  consultant  and  author  in  Hill 
Valley,  Calif. 

“It’s  becoming  common  for  any  industry  that  is 
very  competitive  and  trying  to  attract  the  best  and 
the  brightest,”  she  says. 

Concierge  services  are  new  enough  that  exact  fig¬ 
ures  on  how  many  corporations  offer  them  are  diffi¬ 
cult  to  find.  Still,  evidence  suggests  that  this  trend  is 
on  the  upswing,  particularly  for  high-tech  personnel, 
says  Frank  Gallo,  New  England  practice  leader  for 
strategic  rewards  for  human  resources  consultancy 
Watson  Wyatt  Worldwide  in  Wellesley,  Mass. 

Gallo  estimates  that  less  than  1%  of  all  U.S.  cor¬ 
porations  use  an  outsourced  concierge  service.  Yet 
he  believes  that  25%  offer  at  least  some  conve¬ 
nience  benefits. 

“If  you’re  looking  at  the  technology  industry  on 
the  West  Coast,  it’s  closer  to  90%, ”  he  adds. 

In  fact,  some  concierge  firms  are  targeting  their 
services  at  high-tech  firms  and  the  IT  departments 
of  large  corporations.  Two  such  service  providers 
include  Circles  of  Boston  and  Les  Concierges  of 


Mo,e  Online 


•  Find  out  what  kind  of  tasks 
concierge  service  firms 
will  handle. 


www.nwfusion.com 


vices  are  one  of  the  many  that  Sun  provides  and  a 
big  part  of  why  I  like  the  culture  and  stay  at  Sun. 
These  services  are  very  important  to  me,”  she  says. 

A  few  reservations 

Nevertheless,  concierge  benefits  don't  necessarily 
make  a  company  nurturing.  In  fact,  concierge  service 
could  be  a  guise  for  an  employee-unfriendly  company, 
says  Barbara  Miller,  president  of  Artemis  Consulting,  a 
work/life  consultant  in  Mill  Valley,  Calif. 

“If  concierge  service  is  put  in  place  because  em¬ 
ployees  can’t  leave  the  workplace,  I’ve  got  a  problem 
with  it,”  she  says.  “Employees  need  to  leave  the  office 
to  be  creative,  recharge.”  However,  she’s  all  in  favor  of 
concierge  services  for  corporate  cultures  that  encour¬ 
age  reasonable  hours. 

And  obviously,  concierge  services  alone  don’t  make 
a  killer  retention  tool.  Measuring  use  is  difficult,  and 
it’s  impossible  to  directly  correlate  use  to  job  satisfac¬ 
tion.  Few  employees  would  stay  at  a  company  purely 
because  they  were  helped  with  their  errands 

So  says  Chris  Ledoux,  director  of  IT  for  Brooktroui 
in  Needham,  Mass.  “I  use  the  dry  cleaning  service, 
and  it  definitely  saves  me  time.  Such  conveniences 
are  nice  to  have  but  not  a  reason  why  I  would,  or 
would  not,  take  a  job,”  he  says. 

That  said,  at  least  concierge  services  can  heip  make 
life  a  bit  easier  for  time-starved  employee  s  Gm  v 
services  are  one  of  the  few  —  if  not  the  onh 
fit  that  no  one  complains  about,”  Les  Concierge- 
Wexler  says. 

Who  could?  Your  wish  is  their  command.  U 


San  Francisco. 

“About  50%  of  our  cus¬ 
tomers  are  high-tech 
companies,”  says  Janet 
Kraus,  CEO  of  Circles. 

Moreover,  the  35-employ¬ 
ee  start-up  has  won  a  few 
contracts  for  IT  depart¬ 
ments.  For  example,  a 
large  financial  services 
firm  recently  contracted 
concierge  support  for  its 
Y2K  staff. 

And  since  this  perk 
has  already  caught  on  in 
many  tech-oriented  busi¬ 
nesses,  Gallo  says  compa¬ 
nies  from  other  indus¬ 
tries  will  increasingly 

need  to  offer  more  conveniences  in  order  to  com¬ 
pete  for  workers. 

“It’s  clear  that  money  is  not  the  only  reason  peo¬ 
ple  stay  or  leave  an  employer.  One  big  reason  is  qual¬ 
ity  of  life,”  Kraus  says. 

Concierge  services  boost  quality  of  life  by  han¬ 
dling  mundane  chores  that  hog  workers’  free  time, 
contends  Phil  Wexler,  executive  vice  president  of 
sales  and  marketing  for  Les  Concierges.  Part  of  the 
pitch  is  that  this  perk  boosts  productivity  by  limiting 
the  amount  of  personal  business  employees  conduct 
during  the  workday. 

The  cost  of  outsourced  concierge  service  is  based 
on  the  number  of  employees  covered.  Circles  charges 
between  $40  and  $70  per  employee,  per  year. This  fee 
varies  depending  on  factors  such  as  if  errand  services 
are  offered  and  if  workers  will  be  charged  a  co-pay¬ 
ment,  which  is  usually  about  $5  per  call.  In  contrast, 
Les  Concierges  doesn’t  charge  co-payments  and 
negotiates  each  contract  individually.  The  firm  calcu¬ 
lates  expected  usage  by  examining  employees’  demo¬ 
graphic  information. 

Some  employees  say  concierge  service  is  a 
definite  attraction.  For  Jennifer  Zahm-Maguire,  an 
engineer  at  Sun,  it  meant  help  with  her  wedding 
details.  She  needed  a  location  for  her  rehearsal 
dinner  last  month,  but  wasn’t  familiar  enough  with 
the  area  to  make  the  reservation  herself.  Instead 
of  spending  part  of  her  workday  on  the  phone 
researching  restaurants,  she  e-mailed  the  concierge. 
Problem  solved. 

“I  typically  work  10  hours  a  day.  Concierge  ser- 


7 


- 


Jennifer  Zahm-Maguire  says 
Sun's  concierge  services  benefit 
was  invaluable  in  planning  her 
wedding  rehearsal  dinner. 
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CINDY  CHARLES 


Got  Hiring  Nee  Js? 


The  .Jet  Propulsion  Laboratory  (JPL),  an 
operating  division  of  the  California  Instituted 
Technology,  is  a  leading  research  and  devel¬ 
opment  center  for  NASA.  JPL,  located  in 
Pasadena  is  seeking  professionals  for  the 
following  positions. 

NETWORK  ENGINEERING  - 
SENIOR  LEVEL 

Perform  router/routing  oriented  engineering 
tasks  for  campus-wide  network  (13,000+ 
hosts,  20  routers,  and  200  subnets).  Perform 
installation,  physical/logical  design  using 
Cisco  routers  and  protocols  from  IP,  Apple 
Talk,  IPX,  DECnet,  NetBIOS,  and  NetBEUI 
protocol  suites.  Manage  OSPF  (including 
area  configuration),  BGP,  RIP,  IGP  and  EGP 
IP  routing  protocols;  FDDI,  Ethernet,  and 
WAN  networks;  IGRP  and  NLSP.  Proficient 
with  UNIX  and  MS  Windows  NT. 

BSCS/EE  with  10  years  experience  in  ATM, 
HiPPI,  and  switched  Ethernet;  SNMP, 

RMON  and  MIB;  Cabletron  Spectrum, 
Concord  Network  Health,  and  Cisco  NetSys. 

NETWORK  ENGINEERING  - 
STAFF  LEVEL 

Perform  network  engineer  assignments  in 
the  Institutional  Networks  (INet)  Group, 
including  network  and  systems  elements  for 
the  Network  Service  Element. 

Includes  router/bridge/switch-based 
networks  consisting  of  50+  end  hosts  using 
protocols  from  IP,  Apple  Talk,  IPX,  DECnet, 
NetBIOS,  and  NetBEUI  protocol  suites. 
Experience  with  Ethernet  switches  and 
hubs;  network  management  and  monitoring 
tools,  UNIX  and  NT  workstations. 

BA/BS  in  CS/EE  or  equivalent  and  2-3 
years  programming  experience  using  C, 
PERL,  Shell  scripting,  HTML,  and  web 
publishing.  Knowledge  of  FDDI,  ATM, 
Ethernet,  WANs  and  general  telecommuni¬ 
cations.  Cisco  router  configuration  and  rigor¬ 
ous  systems  engineering  processes  to 
define,  design,  and  implement  computer 
networks. 

Mail  or  Fax  your  resume  and  salary  history 

to:  Jet  Propulsion  Laboratory,  Attn: 
Staffing,  4800  Oak  Grove  Drive,  Dept. 
NW/39,  Mail  Stop:  249-104,  Pasadena,  CA 
91109.  FAX:  (818)  393-4591.  E-mail  (ASCII 
only):  jobs@jpl.nasa.gov  Equal 
Opportunity  Employer. 

. . usa###*6* 


JPL 

Jet  Propulsion  Laboratory 
California  Institute  of  Technology 
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Buy  one  Get  one  at  50%  Off* 


To  get  maximum  exposure  for 
your  Recruitment  Campaign... 

•  Place  an  ad  in  the  Networking 
Careers  Section  of  Network 
World 

•  Then  receive  50%  off*  on  the 
repeat  of  an  ad  within  4  weeks 


Talk  to  Network  World 
800-622-1108.  Ext.  7454 

‘The  repeat  ad  must  be  scheduled  when  the 
original  ad  is  placed.  Restrictions  may  apply. 


high  tech  jobs 


www.dice.com 


a  xem 

High  tech  jobs  onlii 


Talk  To 

NetwoikWorld 

Northern  US 
Karima  Zannotti 
Ext.  7488 

kzannott@nww.com 

Southern  US 
Sandy  Weill 
Ext.  7542 
sweill@nww.com 

Director 
Dodi  Rabinovitz 
Ext  7454 

drabinov®  nww.com 

Career  Fair  Coordinator 
Carla  Cappucci 
Ext.  7510 
ccapp@nww.com 

800-622-1 108 


Call  Now  to 
Reserve  Space! 


Data 

Services 


These  positions  are  part  of 
a  nationally  deployed  Data  Services 
Engineering  team  responsible  for 
providing  Tier  2/3  technical 
consultative  support. 


Senior  Data  Engineers 

Nationwide  Openings 
(Job  #99-0377) 

You  will  be  called  upon  to: 

•  Establish  and  maintain  the 
data  network  architecture. 

•  Deployment  of  national  Frame 
Relay/ATM  infrastructure. 

•  Certification/testing  of 
network  devices. 

•  Capacity  planning. 

•  Pre-sales  support  as  required. 

•  Research  and  design  new 
products  and  services. 

•  Development  and 
documentation  of 
engineering  standards. 

Required  experience  and 

specific  competencies: 

•  At  least  6  years  of  diverse 
data  communications 
engineering  experience 
of  ATM/Frame  Relay/IP 
Router  networks. 

•  Proven  track  record  of 
accomplishments. 

•  Good  oral  and  written 
communication  skills. 

•  Project  management  skills. 

•  Frame  Relay/ ATM  net¬ 
work  standards  &  design 
concepts. 


•  LAN  protocols  :  RID,  OSPF, 

IGRP,  BGP,  PNNI,  B-ICI. 

•  Signaling:  ATM/Frames 
UNI,Q.931,SS7,  CAS. 

•  Management  protocols:  SNMP. 

•  Ethernet  (1  OBaseT,  1 0OBaseT), 
Token  Ring,  H99I. 

•  Circuits:  T-1 ,  T-3,  Fractional 
T-1,  ISDN,  SDH  Hierarchy, 
SONET,  DWDM. 

•  Network  analyzers:  NG 
Sniffer,  ATM/Frame  analyzer. 

•  OS:  DOS,  Windows/95/98, 
Unix/SUN  Solaris 

Additional  background  in  the 
following  is  highly  desirable: 

•  International  network 
design/implementation. 

•  Voice  over  IP  design 
implementation 

For  immediate  consideration, 
fax/email  resume  to:  Corporate 
Staffing-ML/  Job  #99-0377. 

Fax:  800-676-3728.  Email: 
resume_administrator@frontier- 
corp.com  We  value  diversity 
in  tne  workplace.  EOE. 


/roTrrier 

COMMUNICATIONS* 

www.frontiercorp.com 
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GET  A 


Apply  on-line  today  or 
www.nwwsubs(ribe.«)in/nbbj 


J 


Tell  your  colleagues  too! 

(see  reverse) 


teiD  n 
WORD 
n  YOUR 
COUEACUES! 


Tear  off  a  card  below  and  pass  it 
to  a  fellow  network  professional 
who  might  want  a  FREE  Networl 
World  subscription! 


Subscription! 


APPLY  0H-1INE  TODAY  AT: 

http://www.nwwsubscribe.(om/nbpsl 


Subscription! 


APPLY  ON-LINE  TODAY  AT: 

tittp:y/www.nwwsubscribe.(om/nbpsli 


Install  Firewall 
15  min  .  45  sec  .  C_i.  . , 


14  min.  52  sec. 


site 


Lunch  Break 
58  min.  36  SEC 


Parent's  Day  at  School 


Make  time.  Try  Conclave. 


Let  Conclave  make  you  time  for  the  important  things  in  life.  How?  With  its 
distributed  policy  architecture,  the  policy  framework  for  enterprise  network 
management.  Conclave  is  the  only  product  on  the  market  today  that  offers  firewall, 
secure  remote  access,  VPN,  certificate  authority,  virus  scanning,  and  role-based  policy 
management  in  a  single,  integrated  product.  All  administered  with  a  single  interface, 
from  a  single  database. 


Dreaming  oF  bringing  your  public  Web  servers  in  From  the  cold?  Conclave’s 
page-level  access  control  lets  business  in  through  the  “Internet  door"  securely, 
no  DMZ  required. 


Looking  For  a  kinder,  gentler  alternative  to  modem  pools  For  your  remote 
access  employees  and  extranet  partners?  Conclave’s  client  VPN  technology 
provides  secure  remote  access  to  your  network  from  anywhere  on  the  Internet. 


Want  the  savings  oF  using  the  Internet  For  your  site-to-site  connectivity, 
but  not  the  cost  oF  administering  VPN  gateways?  Conclave  provides  a  single 
policy  database  that  defines  your  whole  VPN.  No  need  to  configure  every  VPN 
gateway  with  encryption  keys  or  define  all  those  tunnel  routes.  Want  to  add  a 
new  site?  Conclave’s  secure  key  exchange  and  policy  management  replication 
automatically  configure  the  encrypted  tunnels,  perform  the  X.5 09  based 
authentication,  and  enforce  all  the  access-control  rules  on  the  fly. 


ONCJfAVE* 


Try  it  For  Free.  Just  call  toll  free  1  87  7  CON  CLAV 
(  266-2528  lor  visit  www.conclave.com  for  a  free  evaluation  CD. 

See  us  at  the  Networld* Interop  Show  in  Atlanta.  Booth  //6680 


WTEMTWffll  CMP 


ICSA-Certified  Firewall  /  SC  Magazine  Pick  of  1998  /  '99  NT  Innovators  /  A  Product  of  Internet  Dynamics 
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About  {  Feedback  I  Help 
Ordering  Center  |  Submit  UAL 


EXCHANGE 


What’s  the  BUZZ? 


REAL  TIME  QUOTES!!! 
TELCO  ORDERING  ON-LINE!!! 


m 


Telco  Exchange  Pricing 


TELCO  EXCHANGE 

ordering  center 
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Document  Done 
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rder  digital  service... 

fast  and  secure 
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services 
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info@telcoexchange.com 
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877.988.6484 
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www.telcoexchange.com 
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Remote  Reboot  Over  Telnet! 


Reboot  your  Network  Equipment  via  Telnet,  Dial-Up  and  Local  Console 


Network  equipment  sometimes  "locks-up"  requiring  a 
service  call  just  to  flip  the  power  switch  to  perform  a 
simple  reboot.  The  NPS  Network  Power  Switch  gives 
network  administrators  the  ability  to  perform  this 
function  from  anywhere  on  the  LAN/ WAN,  or  if  the 
network  is  down,  to  simply  dial-in  from  a  standard 
external  modem  for  out-of-band  power  control. 


Individually 
Programmable 
Outlet  Plugs  (8) 


✓  TCP/IP  Security 

✓  Individual  Plug  Passwords 

✓  Dual  15  Amp  Power  Inputs 

✓  Eight  (8)  Individual  Outlets 

✓  Modem  and  Console  Ports 

✓  Co-Location  Features 

✓  115-VAC  and  230- VAC  Models 

✓  Modem  and  Telnet  Auto  Reset 


10Base-T  Ethernet 
Interface 


1 9”  Rack  Brackets 
Allow  Front,  Back,  or 
Center  Mounting 


a,  •«»»  (  1 

*  A  ,SA'“»>.o  ttWsi 

t2! _ _  1  •  _ 

— -  of*** 

— "inn  -  -  '‘0  0 


Dual  15  Amp 
Power  Circuits 


mfe, 


Modem  Port  for 
Out-of-Band 
Management 


□  western 
D  telematic  inc. 


Local  RS232 
Console  Port 


(800)  854*7226  •  www.wti.com 


5  Sterling  •  Irvine  •  California  92618-2517  •  (949)  586-9950  •  Fax:  (949)  583-9514 
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You  Deserve  a  Better  Sleep... 

Choose  BOOMRACK's  rackmount  chassis  with  industrial  grade  power  supply, 
you  get  more  than  a  good  night's  sleep  -  You  get  a  competitive  edge. 

BOOMRACK,  a  complete  rackmount  and  RAID  solutions  provider, 
offers  top-quality  products  that  are  designed  to  exceed  the  limits  of 
performance.  We  understand  that  being  reliable  means  NO  DOWNTIME, 
and  with  BOOMRACK's  products,  you  cease  to  worry  about  problems  and 
focus  on  running  your  business. 


BOOMRACK  -  exceeding  server  system  needs  for  the  next  millennium. 


Rackmount  and  RAID  Solutions 


www.boomrack.com 
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SCREEN 

IISPLAY 

IOLOGY 


Rose  has  done  it  again!  The  UltraMatrix  is  a  keyboard-video-tnouse  (KVM)  switch  that  has  all 
the  features,  is  the  simplest  to  use,  and  costs  the  least. 


■  Simultaneous  access  from  4  or  more  KVM  stations 

■  Supports  multiple  platforms:  PC,  Sun,  Unix,  others 

■  Full  keyboard  and  mouse  emulation  for  automatic 
booting 

■  Expands  easily  with  plug-in  cards 

•  Sleek  on-screen  display  simplifies  user  interface 

«  Innovative  cabling  system  makes  installation 
clean  and  easy 

■  Uses  less  rack  space  than  other  switches 

■  Security,  access  groups,  user  profiles,  status 
screen,  flash  memory,  and  more 


Rose  has  been  providing  innovative  solutions  since  1984.  We 
have  a  complete  line  of  KVM  switches  for  server  rooms, 
classrooms,  desktops,  and  other  uses.  Ask  us  about  our 
BL  KVM  extenders  using  coax  or  twisted  pair.  We  also 
jl have  an  extensive  line  of  serial  and  parallel  data 
switches.  Call  us  today  to  discuss  your  application. 


EXPANSION  CABLES  CONNECT  ULTRAMATRIX 
FROM  1  TO  1.000  COMPUTERS! 


GROW  WITH 
ROSE  PRODUCTS 


Call  800-333-9343  for  your  catalog 

ranee 


Aerospace/Military  Computer  Room 


Plant  Control 


Trading  Room 


Control  Consoles  Class  Room/Corporate 


ELECTRONICS 


USA  Office. 


10707  Stancliff  Road  Houston,  Texas  77099  Phone  281-933-7673  Fax  281-933-0044 
UK  OFFICE:  PHONE  +44  (O)  1264  850574  FAX  +44  (O)  1264  850529 


WWW.ROSEL.COM 


For  Free  Pi  uct  Info 


Chesapeake  is  the  quality  leader  in  Cisco  training.  An 
important  reason  for  our  success  has  been  our  ability  to  offer 
you  the  highest  quality,  customized  training  for  your  personal 
or  corporate  needs.  Building  on  this  heritage,  Chesapeake  is 
proud  to  announce  that  we  are  the  first  Cisco  training 
partner  to  offer  a  revolutionary  v  jased  training  service: 
vLab ",  Developed  by  MentorLabs,  vLab  provides  online  access 
to  real  Cisco  gear  and  lab  content  written  by  networking 
experts.  vLab  is  a  perfect  complement  to  Chesapeake's 
Instructor-Led  Training  and  Consulting  services,  and  allows 
us  to  offer  you  a  more  con  )lete  solution  to  your  training 
needs.  Contact  Chesapeake  at  1-800-447-5967  to  discuss 
how  we  can  best  serve  you. 


Get  vLab  Now 


Visit  our  web  site  for  the  latest  information 
on  our  training  and  consulting  services. 
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Network  managers 

APC  MasterSwitch M:  the  right  answer  for 
remote  reboot  requirements 

Imagine  having  the  ability  to  power-on  and  power-off  sensitive 
communications  and  computer  equipment  instantly  in  a  remote 
office  800  miles  away  without  raising  an  eyebrow.  With  APC's 
MasterSwitch™,  you  have  no  reason  to  panic,  and  no  need  to 
dispatch  costly  service  people.  You  control  power  to  remote 
equipment  from  your  desktop  or  laptop  via  Web,  SNMP,  Telnet 
or  modem  connection. 

Today,  power  management  translates  directly  into  high  avail¬ 
ability.  For  network  operations,  the  ability  to  remotely  reboot 
locked  equipment  and  bring  each  device  back  on-line  quickly 
represents  a  big  boost  in  productivity. 


take  control! 


SPRING  COMDFX 


The  APC  MasterSwitch  saves  corporations  thousands 
of  dollars  a  year  by  eliminating  unnecessary  field 
service  technician  calls.  Test  drive  MasterSwitch  and 
see  what  APC's  Legendary  Reliability™  is  all  about. 


MasterSwitch  benefits  include: 

•  Eight  independently  controlled 
switchable  outlets  for  remote 
rebooting  of  equipment 

•  Requires  only  1U  of  rackmountable 
space 


•  Provides  in  and  out-of-band  connectivity 
to  manage  devices  (Web,  SNMP,  Telnet 
or  modem) 

•  Tremendous  savings  on  costly  field 
technician  service  calls 


Visit  APC’s  Web  site  today  to  receive  your  FREE 
APC  Network  Enhancement  Solutions  Kit  and 
test  drive  MasterSwitch  on-line  before  buying! 

KEY  CODE 

http://promo.apcc.com  m256z 

CALL:  (888)  289-APCC  x7579  •  FAX:  (401)  788-2797 


Legendary  Reliability" 


©1999  American  Power  Conversion.  All  Trademarks  are  the  property  of  their  owners.  MS2A9EP-US  •  PowerFax:  (800)  347-FAXX  •  E-mail:  apcinfo@apcc.com  •  132  Fairgrounds  Road.  West  Kingston.  Rl  02892 
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The 

Simple 

Powerful 

Affordable 


mm 


Features 


Proven  firewall  technology  -  ICSA  certified 
High  performance 
Cost  effective 
Unlimited  user  license 
Minimal  hardware  requirements 
Transparent  dynamic  network  address  translation 
Easy  to  configure  and  operate 
Local  and  remote  management 
Self  contained  operating  system 
Transparent  access  for  TCP,  UDP  and  ICMP 
Supports  difficult  application  protocols 
Alarm  notification  via  pager,  email  and  SNMP  traps 
10/100  ethernet,  FDDI  and  WAN  PPP  support 
URL  blocking 
Email  proxy 

Time  based  access  control 
DHCP  support 

Cable  modem  and  ADSL  support 
Static  and  dynamic  routing 
VPN  support 
Remote  logging 
Stealth  mode 

Secure  private  service  network  for  public  access  servers 


is  called  GNAT  Box. 


‘9\Z.9k, 


% 


Hus»5l  J 


Global  Technology  Associates,  Inc. 
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C(ean  Vour  RooimT 


Network  Furniture  That  Would  Make  Your  Momma  Proud. 


Workstations . Enclosures . Racks . Wallmounts . CableControl . Powerstrips 


D4MAC 


Toll  Free:  888-949-2289 
www.damac.com 
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INTROOUCING 

LAN/WAN 

TROUBLESHOOTING 


Observer  identifies  network  trouble  spots,  and  costs 
thousands  less  than  expensive  hardware-based 
analyzers.  If  you  have  network  slowdowns  would  you 
know  if  they  are  being  caused  by  packet  errors, 
broadcast  storms  or  overloaded  utilization?  Find  out 
with  Observer  or  Distributed  Observer. 

•  Full  packet  capture  and  decode  for  over  300 
protocols,  including  TCP/IP  (v4  and  v6), 
NetBIOS/NetBUEl,  IPX/SPX,  Appletalk,  SNA, 

and  DECnet. 

•  Switched  mode  sees  all  ports  on  a  switch 
gathering  statistics  from  the  entire  switch  or 

packet  capture  from  any  port  or  ports  Finally  a 
protocol  analyzer  that  can  be  used  in 
switched  environments! 

•  Long-term  network  trending  collects  statistical 
baseline  data  for  days,  weeks,  months  or  years 
for  review  and  reporting. 

•  Distributed  version  available  for  $1290  (includes 
1  local  and  1  remote  Probe).  Additional  Probes 
are  $295  per  local  or  remote  segment  or  switch. 

•Network  Instruments'  optimized  ErrorTrack™ 
NDIS  drivers  display  true  errors-by-station. 

Includes  collision  expert. 

•  Track  router  utilization/traffic  in  real  time 

•  Ethernet  (10/100/1000),  Token  Ring,  FDD I 


SO  OBSERVANT, 

IT  C  AIM  SEE  ALL  PORTS 
OIM  YOUR  SWITCH, 


See  what  you  have  been  missing!  Call  800-526-7919  for  a  FREE  DEMO  or  download  from  our  web  site. 


€>1999  Network  Instruments.  LLC  -  Corporate  Headquarters  (612)  932-9899  FAX  (612)  932-9545 
Ope  +44  (0)  1322  303045  FAX  +44  (0)  1322  303056  mfo@networkinstruments.com  www.networkinstruments  com 
Network  Instruments  and  the  'N'  logo  are  registered  trademarks  of  Network  Instruments,  LLC  Minneapolis.  MN  USA 
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t 

Try  it  today  at: 


www.networkworld.com/infoxpress 


HetworkWorld  InfoXpress  is 
reader  service  at  its  best.  An 
online  service  designed  to 
furnish  readers  with  a  quick 
and  easy  way  to  request 
information,  NetWOrkWorld 
InfoXpress  offers  readers: 


.-I 

•  Easier  access  to  more  relevant  information. 

•  24 -hour  service. 

•  The  ability  to  search  for  information  by 
reader  service  number,  advertiser  name  or 
product  category. 

•  Flexibility  in  requesting  information  via 
mail,  email,  telephone,  fax  or  linking  to  the 
advertiser  Web  page. 


4/99 — DK — 00Q34B 


NetworkWorli 

tea  LEADER 
IN  NETWORK 
KNOWLEDGE 

Print  -  Oilm  ■  Events 

AN  IUG  COMPANY 
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Out-of-Band  Console  Access 

Server  "  Trouble-shoot  network 


problems  from  anywhere  " 


Access  Remote 
RS-232 

Consoles  with 
One  Phone 
Line  or 
Ethernet 
Connection 


[oU  600000 1 1 00 1 

Hub 


Router 


DSU 


•  Menu  driven  interface,  unique  naming  for  each  device 

•  Modular  design  for  easy  expansion  or  changes 

Optional  Ethernet  (Telnet),  Dial-up  and  local  RS-232  access 
Internal  33.6  kbps  modem  with  built-in  lightning  protection 
3,6,9  slot  units,  4-32  devices  supported 

Bay  Tech's  DS-Series  Data  Switch  is  modular  in  design.  The  base  unit,  access 
modules  and  RS-232  I/O  modules  ordered  determine  the  type  of  access  you  have 
and  how  many  devices  you  can  communicate  with.  The  modular  design  also 
provides  easy  expansion,  simply  install  another  four  port  RS-232  I/O  module 
and  you  have  access  to  four  additional  devices. 

I  Also  available:  reboot  locked  equipment with  Bayiech 

i  power  control  solutions 

800-523-2702  www.baytechdcd.com 

International:  228-467-8231  Fax:  228-467-4551 
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Immediately 

increase 

productivity. 

Monitor,  report  on,  or 
block  all  Internet  access, 


Booger  Hallo  KeyDey 
1  king  richard:  this  is  rather  slow 
I  king  richard:  this  is  rather  slow 
king  richard: 

'  Kelley:  Hello7 


Booger  Hallo  everybody 

Booger  Hallo Keyiley 

Booger  Pm  from  Belgium,  from  where 


are  you  folks  7 


CHAT  ABOUT  IT! 


Little  Brother  is  watching  you  use  the  Internet' 


546  Valley  Way  Milpitas,  CA  95035 
Ph:  1.800.200.9881  Fax:  408.263.9883  sales@kansmen.com 
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SNMPc  Enterprise 
Manager 

Distributed  management 
for  Windows  NT.  Supports 
remote  consoles  and 
polling  agents,  Web  Trend 
Reporting  and  more. 

SNMPc  WorkGroup 
Manager 

Affordable  management 
for  small  networks. 

With  an  installed  base 
of  over  60,000  copies, 
this  popular  tool  is  resold 
by  major  OEMs,  including 
Cisco  and  ACC. 


Network 

Management 

for  Microsoft  Windows 


Castle  Rack 

Computing 

Phone:  408.366.6540 
Fax:  408.252.2379 


Download  a  Free  Evaluation 

www.castlerock.com 
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It  all  comes  down  to  questions.  Questions 
that  challenge  your  expertise  about  Microsoft 
products.  Question  yourself  -  are  you  ready? 
Be  absolutely  sure.  With  Spike  and  the  gang's 
certification  guarantee,  you  will  be.  Because 
once  you've  completed  the  program,  you'll  pass 
with  flying  colors  or  get  your  money  back.* 
And  don't  worry,  because  as  Microsoft 
Certification  changes,  Transcender  will 
have  you  covered. ..without  question. 


Most  Realistic  MCSE  and  MCSD 
Simulations  Available 
Detailed  Answers  and  Explanations 
NEW!  Computer  Adaptive  Testing  Features 
NEW!  Simulation  Questions 
Money  Back  If  You  Don't  Pass  Guarantee* 
From  $129  -  $179 


Transcender.  America’s  #1  Exam  Preparation  Software. 


Transcender 

Corporation 


To  order,  call  Howard  @  (615)  726-8779  or  fax  (615)  726-8884;  242  Louise  Ave.r  Na.tn.nl!.-  tn  37203. 

©  1999  Transcender  Corp.  All  Rights  Reserved.  Micros:  c-  •  «  ed  trademark  of 
Microsoft  Corporation.  Multi-user  licenses  are  available  Cc-  -o  ;eb  site  for  details. 


www.transcender.com 
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CabieScore 

s*.. 


Save  Big  On  ISO  9000  Manufactured  Networking  Cables 

Assembled  &  Tested  to  Manufacturers’  Specs  &  Industry  Standards 
Immense  Inventory  -  Overnight  Delivery  -  Fully  Warranted 


Compare  To:  ADC  Kentrox,  Bay  Networks,  Motorola,  Ascend,  Digital  Link,  General  DataComni,  Paradyne,  Micom,  Premisys,  Cisco,  and  Fellahs 
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reA\  KVM.Switches@Cost 

pe^etS  Introducing  the  KVM  Systems  Store 


The  KVM  Cable 


Purchase  any  compatible 
Keyboard/Video  and  Mouse 
Switch  “At  Our  Cost”  when  you 
purchase  The  KVM  Cable  in 
quantities  equal  to  the  number 
of  switched  ports. 

Make  your  purchase  on  our 
secured  web  server,  and  we’ll 
even  give  you  a  break  on  the 
price  of  the  cables 


http://www.kvmsystems.com 


Up  to  25%  off 
The  KVM  Cable 
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Do  you  offer  Training  or 
Educational  Services? 


Enku  today  to  find  out  how  to  place 
your  listing  in  our  "Training  Directory." 

Call  800-622-1108  ext.  7465 


If  so,  call 


2000  is  coming! 

Is  there 

something  missing 
in  your  network? 

©  Datum  Network  Time  Servers 


TymServe  2100  TymServe  2100L 

To  find  out  why  network  time  has  become  an  essential  element 
of  today's  networks,  give  us  a  call  at  408/578-4161  or  visit  our 
«vtb  site  at  www.datum.com. 
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Introducing  the  Router  that’s  easier  to  configure. 


Web 
Browser 
Configuration. . . 
It’s  Easier! 


Introducing  The  Emerald,  a 
Frame  Relay  Access  Router  to 
replace  all  others.  Why?  Web 
Browser  Configuration!  Use 
Netscape  4.5  or  MS  IE  4.0  to 
set  up  and  configure  your 
Emerald.  The  Emerald  allows 
you  to  monitor  your  network 
from  your  desktop  using  the 
Web  Browser  you  use  every 
day.  For  less  than  the  price  of 
one  week’s  training  on  those 
other  routers,  you  can  be  up 
and  running  in  minutes! 


Call  800-223-9758  to  receive  a  FREE  demo  Emerald  to  try 
for  45  days.  If  you’re  not  convinced  it’s  the  easiest  router 
you’ve  used,  send  it  back.  What  could  be  easier? 


Take  a  look,  you’ll  like  what  vou  see. 


American  Technology  800-777-551  lor  +1-406-777-5511  fax:  406-777-5512  email:  info@atli.com 


American 

TECHNOLOGY 

www.atli.com 
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EREL  email  newsletters  from  the  most  trusted  name  in  networking, 

Network  World  has  introduced  a  series  of  free,  email  newsletters  developed  exclusively  for  busy  network  IS 
professionals.  These  newsletters  are  emailed  twice-weekly  and  will  alert  you  to  key 
developments  in  areas  such  as: 

Frame  Relay,  Web  Application  Development, 

Network/Systems  Management,  High-Speed  LANs,  NetFlash  Daily, 

Windows  NT,  Groupware  and  Messaging,  and  more. 

They  will  provide  advice  and  insights  on  the  key  issues  shaping  these  technologies. 

There’s  also  a  Career  Advisor  newsletter  aimed  at  helping  you  get  the  most  from 
your  job.  The  newsletters  combine  the  expertise  and  knowledge,  along  with  the 
immediacy  of  email  to  help  you  keep  abreast  of  the  changing 
networked  world. 


NETWORKING 


New  &  Used  Buy  •  Sell  •  Trade 


www.  bizin  t.  com 

NY  Office/USA  Sales:  Main  Office/lnt’t  Sales 

Tel:  (315)  458-9606  DI7I  Tel:  (978)  667-4926 
Fax:  (3 15)  458-9493  Fax:(978)  663-0607 

fi  #219  @  www.netvvorkworld.com/infoxpress  H 


For  More  Information  on  Advertising 
in  Network  World’s  Marketplace 
1-800-622-1102 


r  jmr 

>)  r 
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Save  up  to  80%  on  new/used: 

»-  Routers  -  Switches  »-  XDSL  »-  T1  CSU/DSUs 
-  ATM  »-  Fast  Ethernet  »-  ISDN  >-  Frame  Relay 


Cue*  Systems 


WE  BUY  USED 


Lucent/Livingston  ►  Nortel/Bay  Networks  ►  ADC  Kentrox  ►  Xyplex 

3C0M/USRobotics  >-  Larscom  ►  Cabletron  ►  Newbridge  ►  Adtran 

www.digitaiwaretwuse^om  *■  Paradyne  »-  Digital  Link  »-  Fore 

►  Motorola  ►  Network  Assoc.  ►  IBM 


CISCO 

Ascend 


MKsnrAl.  WAREHOUSE 

Your  Information  Superhighway  Discount  Source « 


Neifast  Communications  Inc.,  56-29  5611'  Drive,  Maspeth,  NY  1 1 378  USA 
Phone:  I  -888-892-4726  or  7 1 8-894-7500  Fax:  718-894-1 573 
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— —  Tests/Reviews  in  August - 

Issue  Date 

Close 

Aug.  2 

•  Windows  NT  RAS  plus  a 
board  vs.  dedicated  RAS. 

July  21 

•  Micron  Netframe  5200  servers. 

•  VIPswitch  3240. 

Aug.  9 

•  Layer  4+  switches 

•  ADS  transition  tools. 

July  28 

Aug.  16 

•  License/metering  software 

•  Server  auditing/reporting. 

•  Dell  PowerEdge  6350  server. 

Aug.  4 

Aug.  23 

•  Monitoring/alerting  software 

Aug.  1 1 

Aug.  30 

•  Delano  e-mail  app.  server. 

•  Toshiba  Magnia  7000  server. 

Aug.  18 

To  reserve  your  ad  space  call 
1-800-622-1108  ext.  7507 

Please  note  that  technology  updates,  and  comparative  and  single  product  review 
dates  and  topics  are  subject  to  change  without  notice. 

Bringing  Unix  to  Windows  Desktops 


For  Windows  95/98/NT 


Visit  us  at  www.starnet.com 


Download  Free  Demo  from: 

ftp://ttp.starnot.com/ffles/mb02/x-wln4t3.exe 


stArnet 

eorviMurvicyvriorsis 


LBX  Support 
Access  Security 
Multiple  Monitors 
Mouse  Wheel  Support 
Cut/Paste  to  Windows  Apps 
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[  PAYING!! 

FOR  TELEPHONE  LINES 


5000  LINE  SHARING  DEVICE 

8  devices  hunt  4  lines 
8  devices  hunt  2  lines 
4  devices  hunt  2  lines 
STACKABLE  TO  ANY  SIZE! 


►  1-800-387-8064 

www.lineshare.com 


L 
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LAN/WAN  •  BUY/SELL 


MODEMS 
DSU/CSU’S 
T-1  EQUIPMENT 
SWITCHES,  MUXES 
HUB,  BRIDGES,  ROUTERS,  ETC. 


FULLY  WARRANTEED 
NEW/REFURBISHED 


Cabletron  Bay  Networks 


Cisco  Specialists 


3Com  Micom  Adtran  H/P 


We  carry  all  manufacturers,  call  ask  for  sales. 


http://www.adcs-inc.com 

PHONE 
800-783-8979 
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Cabletron  Equipment 

GUARANTEED 


•  100%  factory  refurbished 
Only  factory-authorized  VAR 


,;e,TOC* 

'V*t>  . - . 

*  30  day  hot  swaP> 1  year  free  repair 

•  We  also  carry:  Bay  Networks. 
3Com,  Compex,  Cisco  &  more! 


Vnetek  Communications,  LLC 
sales@vnetek.com  •  www.vnetek.com 

Brand  names  are  registered  trademarks. 
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USED 

NETWORK  HARDWARE 

"Over  15  Years  of  Exceptional  Service" 


Fiberdyne 


1 0BASET-1 OBASE-FL  $148 
AUI-10BASE-FL  119 

100YX-100FX  Converter  319 
10T-10FL  Single  409 

10FL-10FL  Repeater  374 
10FLMM-10FL  SM  895 

1 0FL-1 OFL  Repeater  SM  585 
1 0/1 00TX-1 00FX  2  port  switch  MM  294 
1 0/1 00TX-1 00FX  2  port  switch  SM  595 
20  Slot  Chassis  1 0T-1  OFL  $1 83  per  port 

20  Slot  Chassis  100TX-100FX  $354  per  port 


www.fiberdyne.com 


A  FIBERDYNE  LABS,  INC. 

127  Business  Park  Dr.,  Frankfort.  NY  13340| 
Tel.  (315)  895-8470  Fax  (315)  895-8436 
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Purveyors  of  Networking  Hardware 


NEW 

& 

USED 

Switches, 
Modules, 
Routers, 
Hubs  &  More 


Cnci  Stum 


pfoteoo 

-iSSynOplics 

SMC*  OIKHoboticsr 


Bay  Networks 

intel. 


BUY 

& 

SELL 


•  CHIPCOM 


LOWER  PRICES  THAN  THOSE  WAREHOUSE  GUYS! 


+  Authorized 
Service  Center 


-♦-Lowest  Prices  on  Factory 
Fresh  Equipment 
♦  Up  to  90%  OFF  Retail 
for  Refurbished  Items 
-♦-Huge  Inventory  of 
Legacy  Products 
4  Factory  Trained 

Consultants  on  Staff 

Fax  us  Your  Want  to  Sell  /  Buy  Lists  @  516-293-5325 


GIANT 

" 'flow  < 


-4  We  Also  Do  Repair 
&  Exchanges 
-4  Same  Day  Shipping 
on  Most  Items 
-4  Same  Day  Delivery 
Via  Counter  Service 


L  cur  LL vr/i  iuvc  ufiii  Cu-Luic  SLic-i^llic 

Aucucc  vg 

A  Division  of  Ergonomic  Enterprises.  Inc. 

S&  c/ULiULL Lliliti;  Vti22>4LAh!AYZ;.L>i 

International  Calls:  001-1-516-293-5200  /  E-mail:  Sales@4LANWAN.COM 


Made  in  U.S.A. 

Factory  Direct 

Ethernet  Converters, 
Transceivers,  Repeaters 
&  Switches 


C.O.D. 


WWW.4LANWAN.COM,  Inc. 

A  Division  of  Ergonomic  Enterprises,  Inc. 

IliWaHWNMMB  |HEiB 

logo>  are  registered  trademarks  of  the  companies  they  represent 


ROUTERS  •  HUBS  •  USU/CSU 
SWITCHES  •  TERMINAL  SERVERS 

BUY/SELL/LEASE 


ASCEND -LIVINGSTON 
ADTItAN  ■  KENTROX 

Overnight  Delivery  •  fatty  Guaranteed 

800-451-3407 

Fox:  805-964-9405 

www.networkhardware.com 

Network  Hardware  Resale,  Inc. 


Bay  Networks  C3BL0TROQ 

****  1  sYSTems 


The  Merged  Company  of  SynOptics  and  Wellfleet 


Cisco  gjtnij 


We  Stock  the  Largest  Inventory  of 
Refurbished  Bay  Networks  in  the  World! 


Novell. 


•  Bay  Networks  ESP  Trained 

•  Bay  Networks  Authorized 

•  Full  Product  Line 

•  New  &  Used,  Buy  &  Sell 


•  Proven  Track  Record 

•  Good  As  New  Warranties 

•  Repair  Services  Available 

•  Technical  Support 


MADCE 


Phone  801-377-0074 
Fax  801-377-0078 
1403  W.  820  N.  Provo,  UT  84601 

Visit  us  On  the  Web  @  www.nle.com 


National  LAN  Exchange 

888.89 1.4BAY  (4229) 

i 


C.O.D's  Terms 


deliver 


$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ 

Wanted  to  Buy 

Networking  Products  and  Services 

Over  164  000  qualified  subscribers  of 
Network  World  are  ready  to  buy. 

Call  today  to  place  your  ad 

in  the  Marketplace! 

1-800  622-1108  ext.  7507 
$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ 


nsgdata.com? 

N  t  T  W  CD  »  r  SERVICES  OROUf 

specialists  in 
Year  2000 
telex  and  X.25 
solutions  worldwide 


1.800.270.2669  301.662.5901 
www.nsgdata.com 


Livingston  US  Robotics 

Ascend  0,  ®AY  Micom 

.6  K 

>?  Specialist  in  all  ^ 

^  Cisco  products  •£ 

(J)  including  Memory’  g 

r.  LAN/WAN  Products  1 

K,  P 

^  New,  Used,  Lease, 

3Com  ^1#  ^  Rcnt  ^  Codex 


3Com  'S'  Codex 

Adtran  ^  'NoH  ^  Xylogics 
Motorola  Wellfleet 

We  carry  all  Manufacturers 


\MiHennium  Solutions  Group,  Inc. 


•Routers,  Bridges  *Frame  Relay 
•DSU/CSU’s  »Hubs,  Modems 

•Switches,  ATM  ‘Voice  over  Data 


We  Buy  and  Sell 

888-801-2001  Fax  (916)  630-2000 
Visit  our  Web  Site  at: 
http://www.millenniumsolutions.net 


For  details  on  how 
to  put  your  ad  here 


Enku  Gubaie 
1-800-622-1108 


29th  Street  Press 

(800)  621-1544 
www.29thstreetpress.com 

MCSE  Study  Guides  and  AS/400 
and  Windows  NT  Publications 

Infotec 

(800)  700-TRAIN 
www. infotec.com/novell 

Novell  CNA,  CNE,  MCNE,NDS 
Nationwide  Network  of  Centers 

^0 

BNETSYS,  Inc 

"  -  -  v  > 

Marcraft 

(800)  BNETSYS 

(800)  441-6006 

www.bnetsys.com 

•  AJF&j 

www.mic-inc.com/Aplus 

Cisco  CCIE,  CCNA,  CCNR  CCDA,  CCDP, 

A+  Certification,  NET+  Cert., 

Lab  Access  over  the  Internet 

MCP,  Cabling,  Self-Paced,  CBT 

Cable  University 

I  (800)  537-8254 
■i  www.CableU.net 
J  Free  online  training  network 
cabling  installation  maintenance 


I  NCR  Customer  Education  | 

(800)  845-2273 
I  www.ncr.com/trainus 
Cisco,  MCSE,  NT  &  Networking, 

I  Training _ 


[  Certified  NetAnalyst 

(800)  645-8486 

j  WWW.PINEMOUNTAINGROUP.COM 
Protocol  &  Analyzer  Training 
Sniffer,  Fluke,  HP,  Shomiti 


Seif  Test  Software 

(800)  244-7330 
www.stsware.com 
Practice  Tests  for  CISCO,  Novell, 
A+,  NET+,  All  Microsoft 


i  CrossTecfe  NetOp  School  SW 

(800)  675-0729 
I  www.CrossTec.Net 
Six  essential  tools  for  the  networked  | 
classroom.  Download  a  Free  Eval 


|TCIC 

(800)  322-2202 
I  www.tcic.com 

Voice,  Data,  ATM,  CCS7  plus  many 
more,  customization  &  devel.  avail. 


ForeFront  Direct 

(800)  475-5831 
I  www.ffg.com 

]  Computer  based  training  for 
i  the  I.T.  industry 


I  Transcender  Corporation 

(615)  726-8779 
I  www.transcender.com 
MCSE,  MCSD,  MCP  Exam 
Simulations 


Hands  On  Tech  Transfer 

(800)  413-0939 

■f  www.traininghott.com 
Hands  On  Java,  Web,  VB,  C++, 

[  00A&D,  NT,  Unix  Training 


To  Place  Your 
Listing  Here 
Call  Enku  Gubaie 
at  1-800-622-1108 


Contact  these  companies  today  to  help  you  with  your  training  needs! 
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XML  could  play  key  role  in  directory  interoperability 


Microsoft,  Novell  and  others  unite  behind  technology  for  building  metadirectories. 


BY  JOHN  FONTANA 

lAKIi  TAHOE,  CALIF.  —  The 
search  for  directory  interoper¬ 
ability'  gained  momentum  last 
week  as  five  powerhouse  orga¬ 
nizations  joined  forces  to  pro¬ 
mote  a  standard  way  for  direc¬ 
tories  to  exchange  data. 

IBM,  Microsoft,  Novell, 
Oracle  and  the  Sun/Netscape 
Alliance  all  lined  up  behind  the 
|  proposed  Directory  Services 
Markup  Language  (DSML),  an 
extension  to  XML  that  lets 
directories  exchange  informa¬ 
tion  about  their  data. 

The  ability  of  directories  to 
exchange  “schema"  informa¬ 
tion,  data  about  a  directory’s 
content,  in  a  standard  way  is 
important  for  interoperability. 
The  Lightweight  Directory 
Access  Protocol  (LDAP),  the 
existing  standard,  currently 
lacks  that  ability.  A  directory 
schema  is  used  to  name 
objects,  such  as  users,  and 
attributes,  such  as  addresses 
and  telephone  numbers. 


Directories  typically  have  their 
own  unique  schema. 

The  goal  of  DSML  develop¬ 
ers  is  to  create  a  method  for  a 
directory  to  present  its  schema 
in  a  language  common  to  all 
directories.  The  proposed  stan¬ 
dard  would  make  it  easier  to 
develop  “connectors”  that  link 
directories. 

DSML  would  be  the  mecha¬ 
nism  for  exchanging  schema 
data,  such  as  employee  names 
or  privileges,  and  for  support¬ 
ing  user  management  and  Web- 
based  applications.  But  it  is 
certainly  not  a  panacea  for 
interoperability. 

“Interoperability  means  you 
need  some  form  of  common 
directory  schema,”  says  Durwin 
Sharp,  electronic  commerce 
advisor  for  Exxon.  “However, 
time  will  tell  if  DSML’s  second- 
to-last  initial  stands  for  ‘magic’ 
or  ‘markup.’  ” 

Sharp  and  others  attending 
The  Burton  Group’s  Catalyst 
Conference  in  Lake  Tahoe  last 
week  said  they  need  time  to 


Directory  Architect  Dan  Bowen 
is  looking  for  directory  integra¬ 
tion  "nirvana." 


learn  about  the  advantages  of 
XML  and  DSML.  XML  is  a  set  of 
tags,  much  like  HTML,  for 
describing  data. 

“We  keep  looking  for  nir¬ 
vana  and  new  ones  keep  pop¬ 
ping  up,”  says  Don  Bowen, 
directory  architect  for  a  large 
heavy-equipment  manufacturer 
in  the  Midwest.  “But  they’re  all 


non-nirvana  solutions.  .  .  .  It’s 
just  that  some  are  better  than 
others.” 

But  one  thing  is  certain  — 
connectors  are  a  key  element 
of  metadirectories.The  technol¬ 
ogy  is  fast  gaining  favor  as  a 
way  to  unify  directories  into  a 
single  logical  infrastructure 
that  supports  distributed  com¬ 
puting  and  security. 

Both  Microsoft  and  Novell 
have  made  significant  moves 
to  incorporate  metadirectory 
technology  into  their  prod¬ 
ucts  ( NW, ,  July  12,  page  1). 
IBM  plans  to  ship  the  technol¬ 
ogy  in  the  fall  as  part  of  its 
SecureWays  directory,  while 
Netscape  is  currently  shipping 
the  technology  with  Directory 
Server. 

“Vendors  are  backing  meta¬ 
directories  because  users  are 
saying  directories  are  too  hard 
to  deploy  without  these  tools,” 
says  Jamie  Lewis,  president  of 
The  Burton  Group.  “Meta¬ 
directories  show  that  directory 
technology  is  maturing.” 


The  five  vendors,  along 
with  Bowstreet  Software,  say 
they  intend  to  present  the 
DSML  specification  to  a  stan¬ 
dards  body  in  the  fall, 
although  they  did  not  specify 
which  one.  The  World  Wide 
Web  Consortium  oversees  the 
development  of  XML. 

DSML  was  created  by  elec¬ 
tronic  commerce  vendor  Bow- 
street  as  a  way  for  its  Web-based 
application  framework  to  take 
advantage  of  a  directory. 
Bowstreet  will  release  its  DSML 
implementation  in  the  fall. 

“DSML  gets  directory  infor¬ 
mation  into  a  format  that 
can  be  used  by  XML-based 
electronic  commerce  applica¬ 
tions,”  says  Todd  Hay,  prod¬ 
uct  manager  for  Bowstreet. 
“It  helps  pull  the  power 
of  the  directory  into  electronic 
commerce.” 

DSML  fulfills  a  baseline 
requirement  for  directory  inter¬ 
operability,  and  the  fact  that 
rivals  Microsoft  and  Novell  are 
among  those  committed  to  it 
makes  it  more  significant. 

“These  vendors  will  never 
agree  on  standardized  schema, 
but  they  have  agreed  on 
how  they  describe  their 
schema,  and  that’s  important,” 
Lewis  says.  3 


Sun/Netscape, 

continued  from  page  1 

4.1  code,  sprinkle  in  code  from 
Sun  Directory  Services  and 
embed  the  results  in  Solaris  8, 
which  Sun  plans  to  ship  early 
next  year.  Jesperson  also  hinted 
that  Sun  may  include  Net¬ 
scape’s  Certificate  Server  in 


—  it's  a  strong 
direction. " 


Gary  Rowe,  executive  vice 
president,  The  Burton  Group 

Solaris  for  supporting  public- 
key  infrastructures,  directory- 
enabled  authorization  and 
authentication  schemes. 

Sources  say  the  Solaris  8  di¬ 
rectory'  will  be  a  high-perfor¬ 
mance,  general-purpose  direc¬ 


tory  intended  to  support  a  range 
of  applications  and  services.  Sun 
declined  to  comment. 

“Sun  is  getting  a  proven 
enterprise-class  directory  built 
into  the  operating  system  —  it’s 
a  strong  direction,”  says  Gary 
Rowe,  executive  vice  president 
of  The  Burton  Group,  which 
sponsored  the  Catalyst  Con¬ 
ference.  He  says  Sun’s 
directory/operating 
system  model  actually 
resembles  that  of 
Microsoft,  which  is 
building  the  much- 
anticipated  Active 
Directory  in  Windows 
2000. 

“This  is  another 
example  of  the  direc¬ 
tory  as  an  important 
part  of  the  network 
infrastructure,”  Rowe 
says. 

The  advantages  of 
having  a  directory 
built  in  to  an  operat¬ 
ing  system  should  be  similar  to 
those  gained  when  TCP/IP 
stacks  became  native  to  operat¬ 
ing  systems.  Although  the  oper¬ 
ating  system  is  a  little  bulkier, 
developers  will  be  able  to  write 
applications  to  Solaris  and 


■  "Sun  is  getting  a 
proven  enterprise- 
class  directory 
built  into  the 
operating  system 


assume  that  the  programs  can 
take  advantage  of  the  under¬ 
lying  directory  services. 

Directories  are  a  key  piece  of 
infrastructure  for  supporting 
user  management,  establishing 
rules  and  policies  for  net  re¬ 
source  use,  and  managing  secu¬ 
rity  certificates.  These  are  key 
functions  for  supporting  e-com¬ 
merce  sites.  One  reason  AOL 
bought  Netscape  was  for  the 
latter’s  expertise  in  directory 
and  e-commerce  technologies. 

According  to  Mark  Smith, 
directory  architect  for  the 
Sun/Netscape  Alliance,  Sun  will 
scrap  its  Directory  Services 
software  and  transition  cus¬ 
tomers  to  the  Netscape  tech¬ 
nology.  The  Netscape  and  Sun 
directories  are  based  on  the 
Internet  Engineering  Task 
Force’s  Lightweight  Directory 
Access  Protocol;  that  should 
make  the  transition  easier, 
Smith  says. 

Such  an  integration  project 
can  be  challenging.  Just  ask 
Microsoft,  which  has  spent 
tltree  years  trying  to  embed 
Active  Directory  into  the  next 
version  of  Windows  NT. 

But  sources  say  Sun  and  the 
alliance,  staffed  by  both  Sun  and 


Netscape  employees,  are  in  the 
process  of  working  out  a  licens¬ 
ing  deal  for  the  Netscape  tech¬ 
nology.  The  alliance  has  already 
licensed  Directory  Server  4.1  to 
Check  Point  Software,  Hewlett- 
Packard  and  Compaq. 

Sun  has  long  been  a  leader  in 
the  hardware  arena.  But  the 
company’s  software  products, 
including  Sun  Internet  Mail 
Server  and  Directory  Server, 
have  not  sold  as  well  as 
Netscape’s  comparable  prod- 
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ucts.  Netscape  can  cite  many 
high-profile  directory  cus¬ 
tomers,  including  Lehman 
Brothers  and  Ford  Motor.  Ford 
uses  uses  Netscape’s  Directory 
Server  to  support  340,000 
employees. 

Senior  Editor  John  Cox  con¬ 
tributed  to  this  story. 
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Suite  syncs  up  servers,  mobile  devices 


BY  JOHN  COX 

ATLANTA  —  A  new  package  of  appli¬ 
cations  may  help  to  turn  personal  digital 
assistants  into  enterprise  digital  assets. 

Synchrologic  this  week  will  unveil 
plans  for  what  it  calls  the  iMobile  Suite, 
a  quintet  of  applications  for  managing 
the  exchange  of  data  and  applications 
among  corporate  servers  and  various 
mobile  devices,  from  laptops  to  hand¬ 
held  computers  and  PDAs. 

The  suite  will  consist  of  five  pro¬ 
grams,  including  Synchrologic’s  existing 
product  for  copying  data  between 
mobile  devices  and  corporate  databas¬ 
es.  The  other  programs  are  scheduled  to 
be  ready  in  late  summer  and  early  fall. 

The  company  is  building  a  set  of 
interrelated  applications  that  will  help 
network  managers  get  a  grip  on  prolif¬ 
erating  mobile  devices.  Today,  compa¬ 
nies  often  must  buy  separate  products 
from  different  vendors  to  network 
these  devices,  move  information  back 
and  forth,  and  manage  both  the  devices 
and  the  information  flow. 


tion  and  final  component  of  the  suite  is 
the  iMobile  Admin  Console,  which  is  a 
graphical  interface  for  administering  all 
the  suite’s  applications  and  users. 


The  data  synchronization  software 
is  ready  now  for  Windows  laptops.  Sup¬ 
port  for  PalmOS  devices  will  be  ready 
in  August.  In  September,  file  transfer 


and  software  distribution  programs 
will  be  ready  for  laptops  and  Palm 
devices,  along  with  the  Connect  and 
Admin  Console  programs.  All  programs 
will  be  ready  for  Windows  CE  devices 
by  year-end. 

Pricing  varies  depending  on  the 
customer’s  requirements.  01 


Synchrologics  new  iMobile  Suite 

The  suite  contains  five  applications 
for  marrying  mobile  devices  of  various 
types  with  corporate  servers. 

Data  synchronization:  Copies  data  between 
devices  and  server  databases. 

File  distribution:  Uses  a  publish-and-subscribe 
technique  to  move  files  back  and  forth. 

Software  distribution:  Downloads  new 
or  changed  programs  to  the  mobile  devices 
automatically. 

iMobile  Connect  Coordinates  mobile  devices’ 
interactions  with  servers  automatically. 

iMobile  Admin  Console:  Provides  graphical 
interface  for  managers  to  administer  the  suite 
and  its  users. 


The  iMobile  Suite,  when  completed,  is 
intended  to  handle  most  of  these  tasks. 

Among  the  new  programs  in 
Synchrologic’s  Windows  NT  server- 
based  suite  are  applications  for  trans¬ 
ferring  files  from  servers  to  devices 
and  for  downloading  new  or  updated 
applications  to  devices. 

Two  other  programs  are  being  writ¬ 
ten  to  manage  this  mobile  environment. 
One  is  iMobile  Connect,  a  client  pro¬ 
gram  that  will  run  in  PC  Web  browsers 
or  as  a  PalmOS  application.  It  acts  like  a 
connection  coordinator  on  behalf  of 
mobile  users.The  user  selects  from  a  set 
of  tasks,  such  as  “update  my  contact 
files.”  When  the  user  logs  on  to  the  net, 
iMobile  Connect  takes  over  and  carries 
out  all  the  tasks.  The  software  also  keeps 
a  record  of  what  it  does  and  the  results. 

The  second  management  applica- 


T  he  Linux  OS  revolution  is 
taking  the  IT  world  by  storm! 

It's  the  hottest  OS  technology  on 
the  market  today  and  it's  growing 
at  an  explosive  rate.  Now  you  can 
experience  the  event  that  is  fueling 
the  Linux  explosion — Linux  World 
Conference  &  Expo — in  San  Jose 
this  August. 


Linux  World  Conference  &  Expo 
is  the  best  place  to  learn  every¬ 
thing  you  need  to  know  about 
running  your  business  with  Linux 
technology. 


In  four  information-packed  days, 
you  can  attend  a  wide  variety  of 
programs,  choose  from  among  1 8 
tutorials  and  over  35  conference 
sessions,  and  learn  everything 
you  need  to  know  about  running 
an  organization  with  Linux 
technology.  Industry  luminaries 
will  offer  advice  and  share  real- 
world  solutions.  You  can  also  demo 
software  and  technical  tools  on  the 
exhibit  floor. 


LINUX 


Reserve  your  seat  now! 

For  more  information, 
complete  and  fax  or  mail 
the  coupon  or  visit: 

www.  linux  wo  rid  expo,  com 


YtS!  Tell  me  more  about  Tirrilil  fP 
LinuxWorld  Conference  &  Expo 
August  9-12,  1999  in  San  (ose,  CA. 

I'm  interested  in  _]  Attending  _J  Exhibiting 

Name _ 


Company/Organization. 


Premiere  Media  Spot 


Media  Sponsors: 


Linux 

^  WORLD 


NetworkWorld  Admin  UfflOilJlff. 


Address, 


Platinum  Sponsors; 


The  Cornerstone  Spor 


City/Slate/Zip. 


/Klph- 


Phone. 


■  SVl'.ssI 


Pacific 

HiTech 


LINUxCARE 


ema  i  I _ 

Mail  to: 

LinuxWorld  Conference  &  Expo  c/o  IDG  World  Expo 
3  Speen  Street  •  Suite  320  •  Framingham,  MA  01701 
FAX:  508.620.6600  .800.657.1474 


You're  invited  to 
open  your  mind 
a  new  world  of 


San  lose  Convention  Center 
San  Jose,  CA 


august  0  12,  10 99 


august  10-12, 1000 


rn  nnvzuva  sn 


lliMiinl  anil  Maii.iijcil  liy 


Expecting  too  much  from  computers 


MARK 

GIBBS 


was  surprised  to  read  that  a 
swimming  coach  in  Southern 
California,  one  Tom  Johnson,  has 
taken  OfficeMax,  Circuit  City, 

Fry’s  Electronics,  the  Good  Guys, 
CompUSA,  Staples  and  Office 
Depot  to  court  because  the 
clerks  in  their  stores  couldn’t 
provide  Y2K  information  for  the 
products  they  sell. 

Johnson  isn’t  seeking  damages; 
he  apparently  wants  to  get  an 
injunction  against  the  stores  to 
prevent  them  from  selling  equip¬ 
ment  they  don’t  know  much 
about.  Amazing. 

By  that  criterion  —  sales¬ 
people  ignorant  about  the  prod¬ 
ucts  or  services  they  sell  — 
there  is  an  endless  parade  of 
businesses,  government  agencies 
and  individuals  that  should  close 
up  shop  instantly. 
How  ridiculous. 

I  am  certain  that 
the  attendant  at  the 
gas  station  I  use  can’t 
explain  the  benefits 
of  gasoline  oxidation 
or  how  leaded  fuel 
prevents  antiknock¬ 
ing.  OK,  shut  ’em 
down.  Oh,  and  I’m 
sure  that  the  guys  in 
the  garden  center  I 
buy  plants  from 
don’t  know  how 
plants  photosynthesize.  Let’s 
close  ’em  up. 

And  do  you  know  how  your 
CD  player  functions?  Sorry,  we’ve 
got  to  take  it  away  from  you.  I 
know  that’s  ridiculous,  but  so  is 
an  injunction  against  the  likes  of 
OfficeMax  for  not  knowing  about 
its  stock’s  Y2K  issues. 

I’ve  written  before  about  the 
trend  of  demonizing  the  Internet 
(Nty  May  3,  page  82).  I  think  I’m 
starting  to  see  a  new  trend, 
which  I  know  has  been  caused 
by  the  rise  of  the  Internet:  the 
public  expecting  too  much  from 
computers  and  the  computer 
business. 

We’ve  always  been  very  critical 
of  computers  and  aware  of  their 
flaws.  How  often  have  you  read 
stories  about  electricity  bills  for 
$0.00  or  telephone  bills  for  $1  mil¬ 
lion?  Always  good  for  a  laugh  along 
with  a  modicum  of  tutting  and 
shaking  of  the  head, “More  trouble 
than  they’re  worth,  old  chap.” 


But  this  trend  is  different.  Now 
along  with  the  evil  Internet  we 
have  unreliable,  dangerous  com¬ 
puters,  computers  we  can’t  trust 
because  they  might  self-destruct 
as  we  all  start  singing  “Auld  Lang 
Syne  .’’And  it  seems  as  if  we 
expect  that  the  people  selling 
computers  should  know  every¬ 
thing  about  them. 

Give  me  a  break.  We  all  know 
computers  are  unreliable.  Hard¬ 
ware  and  software  vendors 
since  the  beginning  of  the  com¬ 
puter  industry  have  pretty  much 
said  so  in  their  licenses,  docu¬ 
mentation  and  limited  liability 
statements. 

Vendors  state  quite  clearly  that 
you  can’t  and  shouldn’t  rely  on 
their  products  to  do  anything 
even  approximating  what  they 
are  advertised  to  do,  or  indeed, 
do  anything  useful  at  all.  Despite 
that,  most  people  have  never 
wanted  to  believe  that  computers 
are  flawed. 

You  out  there,  yes  you,  Mr.  and 
Mrs.  General  Public.  Get  this: 
Computers  are  not  reliable  —  it 
is  a  miracle  that  they  work  at  all! 
And  the  reason  is  simple:  Man¬ 
kind  doesn’t  have  enough  smarts 
to  write  a  piece  of  code  as  com¬ 
plex  as  Word  for  Windows  that 
runs  on  another  piece  of  code  as 
complex  as  Windows  98,  so  the 
whole  house  of  cards  can  run  for 
more  than  a  few  hours  at  a  time. 
Even  systems  that  we  think  of  as 
super-reliable  (NetWare,  Linux 
and  so  on)  are  only  reliable  in  a 
given  context  over  a  handful  of 
months. 

And  before  you  say  another 
word,  let  me  ask  you  what  man¬ 
made  tools  that  have  any  signifi¬ 
cant  complexity  actually  work 
reliably  for  long  periods?  Cars? 
Nah.  Central  heating  systems? 
Nope.  Refrigerators?  Sorry.  And 
do  the  folks  who  sell  these  tools 
know  how  they  work  in  every 
detail?  Of  course  not. 

I  will  be  very  disappointed  if 
Johnson  gets  his  injunction 
because  it  will  be  another  nail  in 
the  coffin  of  common  sense  and 
supports  the  impossible  theory 
that  computers  can  somehow  be 
more  than  tools. 

Tool  time  at  nwcolumn @ 
gibbs.com. 


Ask,  and  Buzz  shall  receive.  On  July  5, 
readers  of  this  column  were  asked  to  explain 
why  people  put  silly  sayings  after  their  e-mail 
signatures  and  to  send  in  favorite  examples. 

Dozens  of  you  responded.  Thanks. 

The  "why"  replies  were  all  variations  on 
the  theme  that  people  are  looking  to  amuse, 
impress  and/or  reveal  their  inner  selves. 

Analogies  were  drawn  to  tattoos  and  bumper 
stickers. 

One  reader  suggested  that  men  are  more 
likely  than  women  to  make  these  statements, 
a  theory  that  seemed  lame  until  I  checked 
my  in-box  again.  Sure  enough,  every  reply  to 
this  survey  came  from  a  man —  It's  a  guy  thing. 

Before  we  get  to  the  cream,  you  should  know  that  we've  posted  a 
more  complete  list  of  the  reader  submissions  online  (www.nwfusion. 
com,  DocFinder  3837). 

First  up  we  have  a  geek-jock  combo  signature  spotted  by  Rich 
Corbridge,  LAN  engineer  at  First  National  Bank  of  Omaha.  To  get  the 
joke,  you'll  need  to  know  the  commercials  featuring  Michael  Jordan  and 
Larry  Bird  making  a  series  of  increasingly  absurd  shots: 

"Out  of  the  lOBase-T,  through  the  router,  down  the  T-1,  over  the 
leased  line,  off  the  bridge,  past  the  firewall . . .  nothing  but 'Net." 

Here's  a  techno-tagline  offered  up  by  Nexabit  Networks  software 
engineer  Jeff  Parker,  who  insists  it  is  an  actual  DOS  error  message: 

"Error:  Keyboard  not  attached.  Press  FI  to  continue.” 

I'm  not  sure  this  one  contributed  by  Steven  Marlett,  a  network  opera¬ 
tor  in  Omaha,  belongs  in  a  family  trade  publication,  but  here  goes: 

"Never  GREP  a  YACC  by  the  INODE." 

Not  being  a  Star  Trek  fan  —  I've  never  seen  a  single  TV  episode  or 
movie  — this  following  tag  submitted  by  reader  Bil  Corny  needed  to  be 
explained  to  me: 

"Does  showing  a  Mac  to  a  Windows  user  count  as  a  violation  of  the 
Prime  Directive?" 

Mac  guru  Radar  Pangaean,  who  confirms  he  uttered  the  line  "years 
ago,"  says  the  barb  was  directed  at  those  Windows  devotees  who  simply 
could  not  acknowledge  superior  Mac  qualities  no  matter  how  many  of 
those  attributes  later  appeared  in  Windows. 

"We  were  comparing  this  to  Star  Trek's  view  that  some  culture’s 
weren't  ready  to  be  exposed  to  advanced  technology  when  I  made  this 
quip,"  says  Pangaean. 

Continuing  on  the  sci-fi  theme,  we  get  this  from  Bruce  Robb,  a  tech 
support  guy  in  West  Columbia,  S.C.: 

"A  seminar  on  time  travel  will  be  held  two  weeks  ago." 

John  Buck,  a  senior  customer  service  engineer  at  Applied  Innovation 
in  Dublin,  Ohio,  came  across  this  puzzler: 

"If  the  milk  is  chocolate,  then  the  elephant  MUST  be  purple." 

"I  have  no  idea  what  it  means  and  don't  care  to,"  Buck  says.  "I  just 
get  a  giggle  each  time  I  see  it" 

As  the  marketers  say,  that's  the  real  value-add  of  these  signatures. 

Some  are  wickedly  funny,  others  are  just  wicked.  This  one,  spotted 
by  Mark  Nolan  —  "part-time  MIS  director,  full-time  lawyer"  for  a  firm  in 
Clarksville,  Tenn.  —  happens  to  be  both. 

"Cat,  the  other  white  meat." 

And  another  of  the  same  ilk,  sent  in  by  several  readers: 

"The  beatings  will  continue  until  morale  improves." 

We'll  wrap  up  with  my  personal  favorite  from  Roy  Roddey,  LAN 
administrator  at  the  National  Business  Institute  in  Altoona,  Wise.  Roy 
believes  these  blurbs  "say  a  little  something  about  the  person  sending 
the  message." 

Well,  here’s  Roddey's:  "ICBM  Coordinates:  Latitude:  45.128305 
Longitude:  -91.450359" 

Don't  bother  pulling  out  a  map.  That's  where  his  house  sits,  which 
says  to  me  that  Roddey  has  a  lot  of  faith  in  the  post-Cold  War  Russians. 


PAUL 

MCNAMARA 


No  one  gets  McNamara’s  ICBM  coordinates,  but  you  can  fire 
off  your  Internet  tips  to  him  at  (508)  820-7471  or  pmcnamara @ 
nuiv.com. 
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Scalable.  Flexible.  One  of  the  industry's  highest  performance,  highest  density  Ethernet  routing 
switch  platforms.  With  application  management  and  embedded  security  at  Gigabit  line  speeds. 
Like  all  FORE  switches,  simply  the  best  in  their  class.  And  what  CIO  wouldn't  be  happy  with  that? 


www.fore.com  1.888.404.0444 
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ADTRAN  delivers 


Cost-effective  dial  backup 
soluti  ns  for  packet  and 
dedicated  networks 


V.34  analog,  Switched  56 
and  ISDN  BRI  and 
PRI  options 


D  il  backup  around 
monitored  Frame  Relay 
networks 


Cost-effective  dial  backup  solutions  for 
Frame  Relay  and  dedicated  wide  area  networks. 

When  the  circuit  goes  down,  and  anxiety  starts  rising,  you'll  remain  calm.  Because 
with  ADTRAN  termination  equipment  in  your  network,  your  connectivity  solution 

includes  comprehensive  disaster  recovery  capabilities.  More 
proactive  than  router- based  recovery  plans  and  more  cost 
effective  than  carrier-based  methods,  ADTRAN’s  dial  backup 
solutions  give  you  exactly  what  you  need  to  prevent  expensive 
^  downtime  and  keep  your  network  operational.  Whether  your 

^  network  is  packet  or  dedicated,  you’re  protected  —  even  on 

monitored  Frame  Relay  circuits.  Modular,  field-installable  dial 
backup  cards  instantly  bypass  an  inoperative  circuit —  with 
no  technician,  no  lost  time.  Don’t  go  another  day  without  it 

Proactive  disaster  recoveiy 
solutions  from  ADTRAN 


Protection  frc  n  physical 
line,  LMI,  and  PVC  failure 


Available  for  ADTRAN 
itegratec  access 
systems,  Frame  Relay 
performance  monitoring 
and  access  devices, 

T1  multiplexers,  and 
56ktoTl  DSU/CSUs 


Simple,  field-installable 
cards 


Visit  www.adtran.com/recovery  for  a  free  white  paper  on 
disaster  recovery.  Or,  call  8 7?  399-7541  (toll-free)  and  request 
a  free  copy  of  ADTRAN’s  disaster  recovery  brochure. 
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